last executing test programs:

7m36.354722064s ago: executing program 1 (id=718):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200000)
ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, &(0x7f0000000040)=0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000a9fc00040001c0"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[])
r4 = socket(0x8, 0x3, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
gettid()
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, 0x0, &(0x7f0000000bc0)=0x2c)
socketpair(0x6, 0x2, 0x3, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000240)=""/205, 0xcd})
setresuid(0xee00, 0xee01, 0xee01)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0)
r11 = eventfd(0x8)
ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f0000000040)={0x1, r11})
close(0x3)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x28, r8, 0x2, 0x70bd2d, 0x27dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10001, 0x70}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000)
ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f0000000080)=0x5)

7m36.15141764s ago: executing program 1 (id=719):
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0xf, 0x4, 0x8})
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x3, 0x1000, 0x1c, &(0x7f0000000080)="617f3b2828bbee7a6adc70aafc99f91e4d754fcf07839d9fa31c0ef0", 0x5, 0x0, &(0x7f00000000c0)="6958599665"})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x18, 0x34, @random="9827302074ef2bcca51b031a5873e6dc8519fb56"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x61}, @NL80211_ATTR_PMK={0x14, 0xfe, "d387d70c8f48d81f3486a254043b59a3"}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000004}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x2, 0xea, 0x1, 'queue0\x00', 0x8000})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x805}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x1)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000540)={0x9, 0xffffffff, 0x1, 0x4880, <r4=>0xffffffffffffffff})
ioctl$I2C_TIMEOUT(r4, 0x702, 0x2)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000002600)={0x50, 0x0, r6, {0x7, 0x2b, 0x9, 0x800000, 0x2, 0x8, 0x0, 0x4b, 0x0, 0x0, 0x10, 0x60}}, 0x50)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000026c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x11)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000027c0), 0x20100, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000002800)={<r9=>0x0, 0x6, 0x0, 0x8001, 0x8}, &(0x7f0000002840)=0x18)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000002880)=@assoc_value={r9, 0x1ff}, 0x8)
ioctl$BLKRESETZONE(r8, 0x40101283, &(0x7f00000028c0)={0x0, 0x401})
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000002900)=0x6)
ioctl$BLKGETDISKSEQ(r8, 0x80081280, &(0x7f0000002940))
ioctl$VIDIOC_DBG_G_REGISTER(r8, 0xc0385650, &(0x7f0000002980)={{0x4, @addr=0xfffffff8}, 0x8, 0x10, 0x3})
setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f00000029c0), 0x4)
ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f0000002a00)={0x527, 0x3, 0x1})
ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000002a40)={0x2, 0x9})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ac0), r2)
sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x2c, r10, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r11, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x400401}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x4c, 0x0, 0x100, 0x70bd25, 0x7ff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x44001)

7m36.126337739s ago: executing program 1 (id=720):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000002c0)="240000001a005f0214f9f407000904001f00000100000000000002000000000000008300", 0x24)
r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x3, 0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000002080)={0xa, {"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", 0x1000}}, 0x1006)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x47524247}})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='selinuxfs\x00', 0x4000, &(0x7f00000000c0)='/dev/rnullb0\x00')
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)

7m34.313578027s ago: executing program 1 (id=728):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
madvise(&(0x7f00003f7000/0x3000)=nil, 0x3000, 0x10)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x44000)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='discard')
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000200), 0xf20, 0x2001)
close(0x3)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = creat(&(0x7f0000000340)='./file0\x00', 0x14)
close(r4)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000004d2990000000003000000000000000400de00ff"], 0x3a5100)
syz_usb_disconnect(r3)
close_range(r2, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @mcast1, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r7)
madvise(&(0x7f0000be9000/0x1000)=nil, 0x1000, 0x15)

7m32.538242263s ago: executing program 1 (id=731):
mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x2, 0x9}}, 0x30)
sendto(r0, &(0x7f0000000040)="2e17416c97a5caf42a35a049ccefb0ff3f8c35dca57319f6d61fe4b01a48c7bbb04c3ab2e21b90e2e447511e7437a7daee5cd557b6a7071bf1ad52c235555859e67ddf27056b5e8061bc5bd6c89789b804e9", 0x52, 0x801, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @empty}, 0x0, 0x3, 0x3, 0x2}}, 0x80)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)

7m32.451757377s ago: executing program 1 (id=732):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x5, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4)
ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000001080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x78, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff58b8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1b3b}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000001}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

6m36.277438327s ago: executing program 32 (id=732):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x5, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4)
ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000001080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x78, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff58b8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1b3b}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000001}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

2m41.84320681s ago: executing program 3 (id=1856):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x8000, 0x1})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m41.663108203s ago: executing program 3 (id=1858):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x20, 0x0, &(0x7f00000008c0))
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x5, 0xc3}, 0x0, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f00000005c0)={0x80, 0x1, 0xfd0a}, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xc, 0x6, [0x4, 0x3, 0x0, 0xa, 0x5, 0x570]}, &(0x7f0000000080)=0x14)
sendfile(r1, r1, 0x0, 0x7ffff000)

2m41.379759807s ago: executing program 3 (id=1860):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000500)={0x0, 0x1ffffe, 0x10100}, 0x0, 0x0)
setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6})
fsopen(&(0x7f0000000040)='afs\x00', 0x0)
r3 = dup2(r1, r2)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
sendfile(r4, r4, 0x0, 0x7ffff000)

2m41.233136988s ago: executing program 3 (id=1861):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) (async, rerun: 64)
sendmsg$inet(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)='|', 0x1}], 0x1}, 0x44000) (rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648b000) (async, rerun: 32)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 32)
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async, rerun: 64)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async, rerun: 64)
socket$inet_udp(0x2, 0x2, 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@redirect_dir_nofollow}, {@nfs_export_on}]})
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x1ca, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) (async, rerun: 64)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) (async, rerun: 32)
mlock(&(0x7f000002f000/0x2000)=nil, 0x2000) (rerun: 32)

2m41.087198925s ago: executing program 3 (id=1863):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00')
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x124, 0x2, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_MASK={0x94, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x124}, 0x1, 0x0, 0x0, 0x28004800}, 0x0)
read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2020)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x50100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf648b000)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x6, 0xaec, [0x0, 0x200000002240, 0x2000000025d4, 0x200000002968], 0x0, 0x0, 0x0}, 0x78)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)

2m40.643647207s ago: executing program 3 (id=1866):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local, 0x1})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@hyper})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000000)={{@local, 0x3}, 0x1, 0x0, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, <r3=>0x0})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000005a000100000000000000000004000080070005"], 0x1c}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4010, r0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000100)='\x00', &(0x7f0000000180)="061742a4ae154dd16cc8e86fb88e5674fd31827c861afef18aded8ccf8c5d198c2d62053f7f332aec75cc47613522e12351063723d413d0d40a11418ee9237aa751bd2de518c055a8396d0071789607cf2424a2891917611f470de590ba2489f4cb4b49136c10cf1d8f6af34c0fcd31044686d21e98ea132ea2266c21bf5c069106750ae1901f47295b9051dd77814ce3134f53a263a70ad2e53147d9d6e0877daad9af93e64", 0xa6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil)

2m25.616492577s ago: executing program 33 (id=1866):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local, 0x1})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@hyper})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000000)={{@local, 0x3}, 0x1, 0x0, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, <r3=>0x0})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000005a000100000000000000000004000080070005"], 0x1c}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4010, r0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000100)='\x00', &(0x7f0000000180)="061742a4ae154dd16cc8e86fb88e5674fd31827c861afef18aded8ccf8c5d198c2d62053f7f332aec75cc47613522e12351063723d413d0d40a11418ee9237aa751bd2de518c055a8396d0071789607cf2424a2891917611f470de590ba2489f4cb4b49136c10cf1d8f6af34c0fcd31044686d21e98ea132ea2266c21bf5c069106750ae1901f47295b9051dd77814ce3134f53a263a70ad2e53147d9d6e0877daad9af93e64", 0xa6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil)

17.512047909s ago: executing program 2 (id=2375):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="17000000fb"], 0x830200)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0)

14.415946641s ago: executing program 2 (id=2391):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdb"], 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x4850)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x1, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x2000000000000, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11.363593927s ago: executing program 2 (id=2402):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x0, 0x0, 0x33524742}}) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a80)={0x14, 0x14, 0x229, 0x0, 0x25dfdbfd, {0x6}}, 0x14}}, 0x4000091) (async, rerun: 64)
r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
sendmmsg$sock(r5, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="8375896b192cbcefad280f0b3c1bf120", 0x10}], 0x1}}], 0x1, 0x4080050) (async)
io_setup(0xff, &(0x7f0000000380)=<r6=>0x0)
io_submit(r6, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f0000000340), 0x41}]) (async)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
getpid()
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x1}}, 0x10, 0x0}, 0x0) (async)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf012, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x7ef}}}}}]}}]}}, 0x0) (async)
connect$tipc(r2, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x4}}, 0x10)
syz_usb_control_io$hid(r8, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) (async)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10) (async)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r10, &(0x7f0000000140)={0x4, 0xfc06, 0x1, 0x4, 0x85fa, 0x1000000000000000, 0x6, 0x0, 0xe})

8.244594821s ago: executing program 2 (id=2416):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmsg$alg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)="b716c769eb5f7fe9a9f9b1850e74cf5d61bf146a1af25e0fb4df6c22844bc1367f990b87b6e7f0aa68ed764110cd8061360d0b516a68ef5d113a2951e705d309ae24ef1a4eeaa9a7b2ac4a4d400b4961d54a82df59d6a29f39974b1189d2538e23cc37b2a29403602a83ce2e191145af7f2302eaaa5a4f517abcc674010c9233a4121d5b8552ef930cfc8cf07f335654273e3aa92ff7365d3b161b31a68dd7b48ad60c8b52", 0xa5}], 0x1, 0x0, 0x0, 0x400c1}, 0x85)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x4c, r6, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0)
recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000340)=""/83, 0x53}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0)
fcntl$lock(r8, 0x7, &(0x7f00000000c0)={0x1, 0x0, 0x7fffffffffffffff, 0xc0})
r9 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f0000000040)={0x6, 'veth1_to_bridge\x00', {0xb3}, 0x400})
ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, &(0x7f00000002c0)={'ipvlan0\x00', {0x2, 0x4e24, @loopback}})
fadvise64(r0, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x30, r9, 0x93771000)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000001c0)=[{{0x4, 0x0, 0x0, 0x1}, {0x8, 0x1, 0x1, 0x1}}], 0x8)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r12=>0x0})
sendto$packet(r11, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x1a, 0x808, &(0x7f0000000400)={0x11, 0x1a, r12, 0x1, 0x20, 0x6, @broadcast}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)

7.478388136s ago: executing program 0 (id=2418):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100f776e97c00bafb9901ff07f78c0c8f780075f84c1071042703a4610000000109021200010004", @ANYRES64=<r1=>0x0], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r4, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0088a8132788a87c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024f01c173a49b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000040)={0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000500), 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000080), 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000ac0)={0x24, &(0x7f00000002c0)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

5.1179725s ago: executing program 2 (id=2428):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) (async)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)
fsetxattr$security_evm(r0, &(0x7f00000000c0), 0x0, 0x0, 0x3)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc010000100001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000044030000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000500000000000000000000000a000100000000000000000008002300f8ffffff4800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0017000400000029bd700029bd700029bd700029bd70000900000009000000000000800800000001000000550003"], 0x1cc}}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc010000100001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000044030000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000500000000000000000000000a000100000000000000000008002300f8ffffff4800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0017000400000029bd700029bd700029bd700029bd70000900000009000000000000800800000001000000550003"], 0x1cc}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r6, 0x6, 0xe, &(0x7f0000000000)=""/74, &(0x7f0000000080)=0x4a) (async)
getsockopt$inet_tcp_buf(r6, 0x6, 0xe, &(0x7f0000000000)=""/74, &(0x7f0000000080)=0x4a)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) (async)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)

4.907933131s ago: executing program 4 (id=2429):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000b08000240000000f60c00048005000200090000000c00038005000200d30000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040000001c0001801800108014000c"], 0x34}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x0, 0x1)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
lseek(r4, 0x1, 0x4)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000140)='aufs\x00', 0x200000, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000b08000240000000f60c00048005000200090000000c00038005000200d30000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (async)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040000001c0001801800108014000c"], 0x34}}, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r1, 0x0, 0x1) (async)
fchdir(r3) (async)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) (async)
lseek(r4, 0x1, 0x4) (async)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000140)='aufs\x00', 0x200000, 0x0) (async)

4.873373358s ago: executing program 4 (id=2430):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x4850)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x1, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x2000000000000, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.67103397s ago: executing program 4 (id=2431):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000280)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0})

4.519695088s ago: executing program 5 (id=2434):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003", 0x5b, 0x6d91fb6102d8910c, 0x0, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"})
r1 = syz_open_pts(r0, 0x20800)
dup3(r1, r0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0xc80, 0x0)
ioctl$RTC_AIE_OFF(r2, 0x7002)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'bridge0\x00', <r6=>0x0})
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
ftruncate(r8, 0x80000000006)
sendto$packet(r5, &(0x7f0000009f00)="0b032200e0ff25000200475400f6a13bb1000000080008004803218f69fb1e4c1df27f22e71c401826e0ca28b8371d250a5dd6b04fd225", 0x37, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14)
ioctl$BLKRRPART(r3, 0x125f, 0x0)

4.365276547s ago: executing program 0 (id=2435):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x7fff, 0x8, 0x7, 0x7fffffff}]}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000003300)=ANY=[@ANYRESOCT=r5, @ANYRES16=r0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="edf595867c20a41822bf657c015e3292fbec09e8187e5bcd2c40551c96a4456f394e19ad0bb2cb97d8a3f4780a00f6bd4522344bd7d50b9b803071bb72f3c6e318af46108d2adecbee8c573dadc082f5b87fec969cf1601f68a3c3a25ca840e56f6aca27005ee0048b66b4fc0b0d06e90f5b28b7626c3e019f3202a58e6f09abef2752ec45d461e110cb3fc4229f902802161680d486307e88d48625507bf32835e5fb6b8426d01f59ba9ce810419267fef17e9886962e6b190a1db5e3b8439917260d982b9cb530c578ed272746d4145e13ecc7f33c8772d71edf0b4567e07fd890a084edba3d96a5fdf98d3497202a3b824baaaf09d42d0e2591fb4ad2388a27d849cf95b781435aced6d95c11f0b4ac18c67554688c18d315d98eeb2b04063caf69566ffae47c224e99abd2396d44897463f94da4eddf591a9efcd6fb5fc0eadcd78ccdf050fb188a64ccd0e1bd9ad5b837d7d69c5df9c4c0d4a583887f7259dac9c55c272e29b33ee3136389d04a36900cb219b985b9ddf811bf32873322f0d2b5610e6fb71f52c5d9c12647e297f5d5ac2f2133c8048362adb47e95175504c11f69229eb778057a38972a01da131130b5d25c924871961b20700be5366793a45886d58ef2d67ae5537830d9077b41613420df7f6fbbb4e767fa5f9a5a20f6fa31fa84005c4dbad8c75d2844dd2c35327e9140b2471be020b7750af3960e9b84d6aa5795b31764d33d979ffdb7b27fd80a3e074d9c4db903028e1e6fbc29af35d9b1bb29ac240a714ea07130650667db3806c213874d35e98e9e512387afd7c43d234bf77fcd1bd42815689d19d7363e1e4c7139bddc21e9bc031cdcdcaa906b3eb3f77ab480b82a3dd603b61b7a5e62c2e244b7f55a6a095a7ab7a8f90999503e1864e4515d5dd1711bbf28457945241d8c371a0b3750c3804bb4ec2bfb473be63a5900feb791dba05a74018bcfd4f158bb5a82bd1f1cc91c94406ae74a7ddc58b5313d96d3d84a172b7d12cf46c3bb5cbaf3148f91087d8ae2e73985f6a3944e79f441608086f3ac8a9af0c25c370d7b0580b57fe52241fe18d81b6d1312309d03b711d1a0d67c08c7b69c5b9500191d5d408600cd2282892150e396ced88c7136dabd7d61c5a72a29d4f2831b3d9cfccded429c8343e97d930851af3e96075f25c1ffa92c4a2e77c335714ec331226fed2d20258df3accf72e8a12841b0800eb304f37d18aaf7c219140d9188c356e1931c8493879591b8280207bc5729c8b832dc293318a903b42cb425ed837efd4a8cbc52c3ab78fbce47161fe92f551cb1eb7d881624c1b490512d728701b37f12bcd6b7f9c277668024e3f373e4aa9eb7b4e389ab715d00dc801e10b51edb8a8e716fb6f674cce90a49b2b034c018791d6b29aa34e257e13eb02acad17acc4fc370acbc46e3e234a82b1fb145c61d56769da4372e855f5ad92819b32e7e44c703f995ff8268bbf6ec14aded04ee3a58a0f3eb325c7bb275fab9fa575fd7300dac51b6497832492da28ac32e137a156e9681cd4a8f575c0a47a5d8e57ee47014989fd8081b894c02a481b7cb80e94807cdc782e0388a6131446f6f9f53a719bbbe1600a040361cad85e188d13741be9d089cbcc8a89ef9e4322a58670d243262cf7b456476690137a106503bd4c447bc2096833b20de7fa11137e530f7206e736922253b64370d7eb8ad2e091d176cf2330a378b38b1edb43c83dafe6ed1466c80fc6bd8e4157bb77b9329171a4e6f1aa2f356c11454463e04c972f72a79e53606558535e284a6d82df39d55c519b5b2891d70ab73d7be828e1c2cab811ab87512d11f62564a4e7cee199201feac5a9c7d34362cd35ab3d3226a267c33c8aa971293077bc465f83d57e2f37f4e026c7f87a19216caff26f6b73c7b868b4b87917416374c2fb1985a2320c045f991150d1750b1aaa8f10555c95b1e1261800265650d4d82ad5a0cea539453056e2c348bf199d37e0206de47d65ad30cec74ddba6af6de594ceb8876773a7c08a5a42b9287907bee90c19878fbd6789eff05e7b6a94db6a9c9148b4f13f9d80e71a7a07c276d16a2530f2fcf98cdbac092e16e4d854f8ecb13ce43a5dd3e8b9755989aff9e5d259ff08d1830e42fb9169b994bb9a65f45196c8d4f14851be95c277f96962183dd9b5aa43936295a6624567998c76f60d5696eeb3e3fa67210a08f2bb86f29f55acbd3b34b2afc0d2a481fda36e90eedeb2da1a044bd1dd41a5a3c4b42c8023c3e3b5d1b4737ee81acc4fa1b522fef345dd8faac33ce21d7eec04da8a2fd2e184d65d28e0c72823dd3efc43d591907ad4f331264e8f269764823019bd9a2585140aafd60d006a44decb2dd9f39e1dca8e34cb14b3480d29a89e78602e3743b38406eb0a8f6cf1b4f20fbed15b8c4325f989677dcc33cfab2a2f888470db47e2b2eef332a45cfbe83992bb68b625f92280e56d970bcb5b0209ef201507e76e94218376a0cb275d036a699bb88fa697ae3c19c08f2c5ba36346a8ddae3556c502a9a66f8ec2e614b6b4ce07c96f3ffb846be41d36722f1e35864833cc36bcbd2a7eb0e1b5b9f7ac281707e71d597396b95ce3ee04f6bc6be252544968ff4d9dd64aeff81e7de488790cc45d42281481d887220c003f3742b8bd772ddafcedc4d5fdfd1b0b92fc2eb4e826fdb051eb4cf4e7aa4b0200bfb8b153ed29c1fdad74d3eda238ec6380a5c8ff37becac33eb3660cc040ff69e28e897cd3bb5491fc1826ebead4bd741ebbd4d2014330e93578b7285701f490319f0dc95198c0223d014e30a41887d318c9718c503798bac73c2cbaedc493f15996412890858eb1654f865a7105db7b89210842c8b66df0be86cc79c6422f2822aaf4c3e4b3de71a81f9f5d2525ea16ac090afd36993c29afeb907d3647a843b425a247abd871d121a6dcfe812500337babe9e18f764aa10f11b6073ffdc5e017cb94e19c6160cd536979135bfcbf97f50f5773cc0dde2499a38237e1b8dd1fc646470ecf4c46ab8a2ccfa23ccc4f93a1dcf91b02eeb76773e3c22c94ebdeef8d635fbee119b947548aa29194e57fb4b0708b55d5eacd308e8c4396b7bc3d28355df77ea2fc72e743528749c2a20562d8caa945cc75607790ef5e047b9597fa663c3ab0e6ebdd50cc270d8d857ff2cbb8556c3cb5957e61b2a7e64171ca671709b03df3cc79f532e05c40275ab3c1946bae751c467a791cdf2fcdbb1585c91378a2d996cb38d4a534620ad354c0d19c29e7acf472c61f6ac4de1928c492e21dd647332a85bb1a076182ae8f6078fc054fac5f44f3048ea7ca5427b26c1830db8e8db5d901a47e220f9343497dd0b8fd3d1b260e7d54e10754f19582e3db191b3b585600517a4334e99c4d3897707bb3247d0b050688ab76a71e98b3cf733e7ea1e753415ecf1574249e62831e4a95c69bb57a57a60e733cde1de7868fa9dc3c1092d2dfaf4eea0ace54d7339ed63a11b0ae5acbcbe52497791be9a955c2e13cb591881073a7725e3c76ed5b2f873894291b1451be973db89db11eb7d88770a27479a9595677831bd69685887a6e2de7bcc2af65b2873d23e6465910685a2da412e52b48c7ab0c6534f61bb89fd309d7cf4d84eae9fc121a1dfb9a51d55961032b27a0fe9d42e84c6c130ebd414c760ae757d393621e75e1338e3d9c44047a459b80d4efca71b5f3e750be98b83783ba0c96d08e9f7f952cb8dc1d098bad08eb9831ef1ac25bc69926f45ebaa8cde1b51446458ca98d93e3108a0983703fb43fd8d6b4a6ed8859dd2d740d19e8cfa6ba2a9bc8e2b7a9602495eaa59270d42abd92309716b916cbc696472133834f41c13b68169eed8d6373be409cb8ec6be5f05807ad2a081290aeb438be1675a5568319beac8b0f2b1ee6320ea37236fe66c5f778da057b67de82434042b3ad583c2112ffdf8f3423a811a82a2d3d44a7866335b4415262257e70866d902bb26dbcf67ecc3ae7ce3812ad54830a974e37dd60140a0e6bc6b74cde412b892fd1c8152958976456940ba4aae452548077a8538fbb155ba00d5741563d83b5985005a8d5e4009d1b5a439e8513b51bd42e714b0c6cd62d9bb76414d99ec3af61da6d3922c3353651d0d1b69b67302d235d9adbc80c5770cb47b3950565cf0979fc6c34f3ec381bb7ab7c20243145366932199b3537d074da8735db6fb7d924237329c167c8c83f146b9a2e20c83bda150e9c5a8d298178680920b25d1ffb892429582f1a7d531cb3a2b39937bd5cec7d99a414087a7cf00b4a24af3374a481b1bcdcc5027b71d08003fe94bca02ad6c25d79845cc3f5df7ece1e2e76767f5dbc137ec9470190701d3786bce78c6016e5eea3aa7297f6ecae9f40865f1441ee3a1e86cc068b386bbd03047fea8f5fe351a7426a999301e0cade17178b4169eadeeea58010526a7b1e273a7b37ac96941de27db9cbcb0f5954c666b8c38b3f6dabb728591a59e1b11797c98e32c5391574cb3b60645a7433d3a4c92e22ae75ed6e7fd3a5c32fefead2e9bd94c893a35b4d7e66b1d084b117e63961601774efedeea0c5d397cc085f044a2c52844bc4e2bfc07c1569a9a7e2f1603233451526f682d2f0517ec37f1e11e5ad13d2e7297f0953ed9807e121f9fa3c0c90b6bbca76c54d305e3ea4335fb7a4aa49351e2a36f285e78a674312888996dfb52b03c15e5a11af4acfc4da94ccfc2191dcb703383a27f97f215ebeba882fd82571104a868c8b3536b4313471ebd9ae26c85dc7b41538854cb37f553dd724e196b32ad21380a9e3738d99628124ee8638cfa57ea72f867508c5d493bced43a5baf1a53cb2568baf74288805f7279cd9040d5695c6bbd384886d14685d87cee4a7df5e4e58e74ce064c90bcedac7df5974127502f66506d35360d87b8ff82a3b13d25c493bab53174ca5d111dc7229d7e683cc80b40c6febd2407df9a416785f05f147eb36bd1d09aed8aed009c3d316cd9a85424a542dbec85dc6443a65d58aa27991e0937b7598d174300ce9a5666c30c1fbe223a8eee875961f191de6ed801a011e324dba2c574f532f7226e423c4f08d56dde66ce66c2c64513d32adedbe8ea1d8402751924703ec846b726d4bb91fe2de0cc81030af3da121214fbc1078e1ab6cef7970f1fd87b8255fe541c5c99e36ddf1a4710a3e30378368e14f431cfcaf3ef33abaae4fcc1a6644a0f464008d4761bc2290fa26120c1f64b496681338285f34cfe5329f8b03a58025508c3edf373f31a00039b779f7caec89a8eef6d4c58c5fd1e51a96f3a5cb5389b722a562b068e0672e291cd307b53a7692d8e2ab71b32a3c7b24b9062c223f014be00691db3a6d6ff1f87d6e095cd2a3be8d01397c0072a0ca27c371e84db11724136a53462cfd3e11e22769562547e32306d683a5a1e9d0c47ec28031ae7e2d5813401455c5f0e20e3641c0e90b02738716671a15a45d50b95d37daffd36f5f284af18165cb57498b4f2a4ef51e7e55be79dc6fcbad44d215409eede1d480e8f46669bdffc593e20f587c64cacabde98c118af492083c5bb61044fdf5121825ed70d4f9b3a2673d52b42d711ad920dcd0dc8981ad81e848bdd620ea434091408e349edb85e0135a086a7f530a68e3574a4212f1fa0942c249e3ad35035a5c11682f17b67a44238f585a236cc8498830cd6ceda717fd2b46e2cd9d355b1dbc62037becfff20789e60fffbd262a948fb6d02087d5f0298354ace25d3669c827aa83080113be7f06e7b79d8b245a53dda9415f373ca", @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
splice(r6, 0xfffffffffffffffe, r6, &(0x7f0000000300)=0x1, 0x9, 0x8)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064d0, &(0x7f0000000140)={0x0})
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={0x1138, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8001}, @NL80211_ATTR_VENDOR_DATA={0xfe, 0xc5, "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"}]}, 0x1138}, 0x1, 0x0, 0x0, 0x24000000}, 0x8800)
r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r9, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2f, 0x4e20, @broadcast}}, 0x24)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x804, 0x6}, 0x3d, [0x6, 0xc95a, 0x9, 0x8, 0x2000081, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x5dd2, 0x3, 0x7, 0x100, 0x7, 0xa, 0x7, 0x3, 0x3c57, 0x1, 0x24, 0x2adc, 0x800, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8000, 0x641, 0x3, 0xa, 0x0, 0x71, 0xd, 0x4, 0x106, 0x0, 0x7, 0x3d, 0x8f, 0x4, 0x1, 0x4, 0x5, 0x4, 0x9, 0x0, 0x80, 0x0, 0x4, 0x6, 0x8c0, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12b, 0x8000, 0xe, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x201, 0x0, 0x3, 0x0, 0x7, 0x1, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x4, 0x4, 0x400, 0x8, 0x2, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x1000, 0x101, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffff7, 0x6, 0x7, 0x5, 0x0, 0x10007, 0x7, 0x5e0176be, 0x2, 0x7f, 0x9, 0xa, 0x4, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0x20ff], [0x5, 0x1, 0x5, 0x650, 0xfffffdfa, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x10000009, 0x3e6, 0xb, 0x5, 0x2, 0x60002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x2, 0x200, 0x80, 0x3, 0x4, 0x2, 0xffffffff, 0x7fff, 0x7, 0x53cf697b, 0x8, 0x4, 0x54fe12da, 0x400005, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x2, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x6, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x935, 0x6, 0x6, 0x4051bf, 0x5, 0xce7, 0x1ff, 0x6, 0x87, 0x5, 0x3, 0x104, 0x80000000, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x0, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x405, 0x8, 0xff, 0x5, 0x3, 0xfffb, 0x7, 0x8, 0x100, 0x3, 0xb, 0x2, 0xe36f, 0x6, 0x101, 0x10000, 0x2, 0x9, 0x2b91, 0x6, 0x8, 0x9, 0x1, 0x0, 0x83a0, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0xfff, 0xdfffffff]}, 0x45c)
r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r10, &(0x7f0000000040)="e2", 0x918)
poll(&(0x7f0000000a40)=[{r8, 0x80}], 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r8, 0x4112, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="000206000000058dc102df3e"], 0x0, 0x0})
r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
fadvise64(r11, 0x94, 0x6e, 0x5)
r12 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x10)
inotify_rm_watch(0xffffffffffffffff, r12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r11, 0x2000)

3.571370136s ago: executing program 5 (id=2436):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000010080), 0x3, 0x0)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x4c81, 0xfffffffffffffffc)
socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r6=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x4880, &(0x7f0000000200)={0x11, 0x15, r6, 0x1, 0x1, 0x6, @broadcast}, 0x14)
connect$ax25(r5, &(0x7f0000010680)={{0x3, @default, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000010040)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x1fffffe}})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r8, <r9=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x7, 0x4)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x304}, "739f6fc7d4efb5e4", "30eb3ce1e65723d8f2c0eee91720f94e", "a2c2657c", "ecc0b050c7adb96f"}, 0x28)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236cd1f8d50f2568ac466a6d40024f87588cbe7808c481b157f18acb07cee62b1d238ba704435ee1c055697eb1ee0e2cfa36d2efbf1ac9fa85fe4", 0xfdae}], 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000010000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
r11 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
ioctl$sock_ax25_SIOCDELRT(r11, 0x890c, 0x0)

3.268140515s ago: executing program 0 (id=2437):
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
close(r0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x39, 0x1a, r0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2)
timer_create(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}}, 0x0)
write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x2010, r6, 0xf658c000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.995586749s ago: executing program 0 (id=2438):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x700})
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000000)=@ethtool_cmd={0x9, 0x2, 0x3, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}})
write$tun(r1, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x3e, 0x1c, 0x64, 0x0, 0xb, 0x2, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "1697e3ba0fa8a2e7"}}, 0x2a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)

2.660014228s ago: executing program 5 (id=2439):
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x4, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]})
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES16], 0x0) (async, rerun: 64)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (rerun: 64)

1.98148142s ago: executing program 2 (id=2440):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x4850)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x1, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x2000000000000, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.843780248s ago: executing program 4 (id=2441):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x86, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x8, 0xff, 0x3, 0x20, 0x2}, 0x2c, &(0x7f0000000a80)=ANY=[], 0x2, [{0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="8403cbf53d57961a2e5be5b1cc1cfa5c279e55def13742edc1ab04dfba7657b30da8386b911f89cba5ba1f93646bfd6100dad651393e307ae39dcaa6d429e364cd30a5f081d766d6c80137f1020f5555fbc53106a51e551971be637278f32250b3eb623fdab1147071699192dbf9402b1cb836b568879a6a97061a4ee3ee422c88767349"]}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x807}}]})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000600)={0x800006dc, 0x0, 0xfffffff9, 0x75e, 0x11, "1012a2c2e0d997451fe550bd026388080d00"})
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000080)=0xa40, 0x4e)
sendto(r3, 0x0, 0x0, 0x4000000, 0x0, 0x0)
pread64(r1, &(0x7f0000000a00)=""/103, 0x67, 0xfffffffffffffffb)
preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000880)=""/175, 0xaf}], 0x1, 0x9, 0x2081)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x5)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)}, {&(0x7f0000000b00)=""/218, 0xda}, {&(0x7f0000000a80)=""/69, 0x45}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000300)=""/131, 0x83}, {&(0x7f00000003c0)=""/67, 0x43}, {&(0x7f0000000440)=""/3, 0x3}, {&(0x7f0000000480)=""/153, 0x99}], 0x1000000000000182, &(0x7f0000000640)=""/92, 0x5c}, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa)
dup(0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./file1\x00', 0xf0a552e37b97b976)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x2, 0x0, 0x800000000006, 0x40000476, 0x4000000000000200, 0x20000004, 0x5, 0x0, 0xfeff})
fallocate(r6, 0x1, 0x9, 0x81)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x65)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000000c0)=@s={0x5, @generic})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x5c)

1.691107838s ago: executing program 0 (id=2442):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x8000, 0x1})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_virt_wifi\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.534177434s ago: executing program 0 (id=2443):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000ac0)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="20100000bb4c7b04e8292c177d0de9655a40ad0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

1.251749109s ago: executing program 5 (id=2444):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f00004a3000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x89356000)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)

320.354372ms ago: executing program 5 (id=2445):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
fadvise64(r0, 0x94, 0x6e, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4)
mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1)
r3 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
shmdt(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0x9, {}, {0xffffffffffffffff}, 0x1c0, 0x5})
sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x301300}, 0xfffffffffffffe60, &(0x7f0000000080)={&(0x7f0000002440)={0x14, 0x3c, 0x100, 0x70bd29, 0x25dfdbff, {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000010)
r5 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "9ecad92a17d6ac5045e3ade29f28bd6af5e44e631a4702a428f50287378eef4ec6c408956f3da90d6001df99e2a82b761f900e9c0942e2d1e01d4766c4ad2cf7", 0x25}, 0x48, 0xfffffffffffffffc)
keyctl$invalidate(0x15, r5)
keyctl$read(0xb, r5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

319.587726ms ago: executing program 4 (id=2446):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000080)={&(0x7f0000001180)=""/4096, 0x1000, 0x4, 0x9})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x541942, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
readv(r3, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x918)
sendfile(r1, r1, 0x0, 0x7ffff000)

119.411006ms ago: executing program 5 (id=2447):
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conf_rsp={{0x5, 0x3, 0x1c}, {0x3, 0x0, 0x0, [@l2cap_conf_flushto={0x2, 0x2, 0x1000}, @l2cap_conf_efs={0x6, 0x10, {0xd, 0x1, 0x7f, 0x9, 0x5e5a, 0x7eb}}]}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x83fe, 0x6}}]}}, 0x31)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = getpgrp(0x0)
r2 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)

0s ago: executing program 4 (id=2448):
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

 vkms_vblank_simulate: vblank timer overrun
[  588.010970][ T5897] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  588.182985][ T5897] usb 1-1: Using ep0 maxpacket: 32
[  588.212132][ T5897] usb 1-1: config 0 has an invalid interface number: 108 but max is 0
[  588.241092][ T5897] usb 1-1: config 0 has no interface number 0
[  588.247423][ T5897] usb 1-1: config 0 interface 108 has no altsetting 0
[  588.266977][ T5897] usb 1-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd
[  588.280014][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.288735][ T5897] usb 1-1: Product: syz
[  588.298614][ T5897] usb 1-1: Manufacturer: syz
[  588.307654][ T5897] usb 1-1: SerialNumber: syz
[  588.329719][ T5897] usb 1-1: config 0 descriptor??
[  588.348756][ T5897] gspca_main: spca506-2.14.0 probing 99fa:8988
[  588.531761][ T5851] Bluetooth: hci0: command 0x0406 tx timeout
[  588.616870][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout
[  588.623328][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout
[  588.688632][T12913] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2069'.
[  589.456905][T12922] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2071'.
[  590.103638][ T5934] usb 1-1: USB disconnect, device number 121
[  590.122830][T12928] FAULT_INJECTION: forcing a failure.
[  590.122830][T12928] name failslab, interval 1, probability 0, space 0, times 0
[  590.219938][T12928] CPU: 1 UID: 0 PID: 12928 Comm: syz.5.2074 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  590.219965][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  590.219976][T12928] Call Trace:
[  590.219984][T12928]  <TASK>
[  590.219992][T12928]  dump_stack_lvl+0x189/0x250
[  590.220019][T12928]  ? __pfx____ratelimit+0x10/0x10
[  590.220041][T12928]  ? __pfx_dump_stack_lvl+0x10/0x10
[  590.220062][T12928]  ? __pfx__printk+0x10/0x10
[  590.220090][T12928]  ? __pfx___might_resched+0x10/0x10
[  590.220109][T12928]  ? fs_reclaim_acquire+0x7d/0x100
[  590.220133][T12928]  should_fail_ex+0x414/0x560
[  590.220158][T12928]  should_failslab+0xa8/0x100
[  590.220180][T12928]  __kmalloc_noprof+0xcb/0x4f0
[  590.220197][T12928]  ? tls_get_rec+0xbf/0x670
[  590.220217][T12928]  ? __local_bh_enable_ip+0x12d/0x1c0
[  590.220240][T12928]  tls_get_rec+0xbf/0x670
[  590.220267][T12928]  tls_sw_sendmsg+0x4ae/0x23d0
[  590.220306][T12928]  ? __pfx___might_resched+0x10/0x10
[  590.220345][T12928]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  590.220362][T12928]  ? __lock_acquire+0xab9/0xd20
[  590.220383][T12928]  ? __pfx_aa_sk_perm+0x10/0x10
[  590.220404][T12928]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  590.220425][T12928]  ? sock_rps_record_flow+0x19/0x410
[  590.220449][T12928]  ? inet_getname+0x387/0x3c0
[  590.220471][T12928]  ? inet6_sendmsg+0x101/0x120
[  590.220494][T12928]  __sock_sendmsg+0xe5/0x270
[  590.220519][T12928]  sock_sendmsg+0x158/0x230
[  590.220543][T12928]  ? __pfx_sock_sendmsg+0x10/0x10
[  590.220576][T12928]  ? __asan_memset+0x22/0x50
[  590.220599][T12928]  ? iov_iter_bvec+0xb8/0x180
[  590.220619][T12928]  splice_to_socket+0x8ff/0xf10
[  590.220661][T12928]  ? __pfx_splice_to_socket+0x10/0x10
[  590.220678][T12928]  ? current_time+0x222/0x370
[  590.220715][T12928]  ? touch_atime+0xf1/0x6d0
[  590.220751][T12928]  ? __pfx_splice_to_socket+0x10/0x10
[  590.220770][T12928]  direct_splice_actor+0xfe/0x160
[  590.220794][T12928]  splice_direct_to_actor+0x5a8/0xcc0
[  590.220836][T12928]  ? __pfx_direct_splice_actor+0x10/0x10
[  590.220857][T12928]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  590.220889][T12928]  do_splice_direct+0x181/0x270
[  590.220913][T12928]  ? __pfx_do_splice_direct+0x10/0x10
[  590.220932][T12928]  ? common_file_perm+0x1b5/0x230
[  590.220954][T12928]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  590.220978][T12928]  ? bpf_lsm_file_permission+0x9/0x20
[  590.220993][T12928]  ? security_file_permission+0x75/0x290
[  590.221015][T12928]  ? rw_verify_area+0x255/0x4d0
[  590.221038][T12928]  do_sendfile+0x4da/0x7e0
[  590.221054][T12928]  ? __pfx_vfs_write+0x10/0x10
[  590.221080][T12928]  ? __pfx_do_sendfile+0x10/0x10
[  590.221096][T12928]  ? __fget_files+0x3a0/0x420
[  590.221129][T12928]  __se_sys_sendfile64+0x13e/0x190
[  590.221153][T12928]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  590.221171][T12928]  ? rcu_is_watching+0x15/0xb0
[  590.221196][T12928]  ? do_syscall_64+0xbe/0x3b0
[  590.221222][T12928]  do_syscall_64+0xfa/0x3b0
[  590.221241][T12928]  ? lockdep_hardirqs_on+0x9c/0x150
[  590.221261][T12928]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.221278][T12928]  ? clear_bhb_loop+0x60/0xb0
[  590.221340][T12928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.221356][T12928] RIP: 0033:0x7ff42398e9a9
[  590.221372][T12928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  590.221386][T12928] RSP: 002b:00007ff424731038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  590.221406][T12928] RAX: ffffffffffffffda RBX: 00007ff423bb6080 RCX: 00007ff42398e9a9
[  590.221418][T12928] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  590.221428][T12928] RBP: 00007ff424731090 R08: 0000000000000000 R09: 0000000000000000
[  590.221439][T12928] R10: 00000ffffffff004 R11: 0000000000000246 R12: 0000000000000002
[  590.221450][T12928] R13: 0000000000000001 R14: 00007ff423bb6080 R15: 00007ffd300b8378
[  590.221479][T12928]  </TASK>
[  590.690915][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout
[  590.697177][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout
[  590.964572][T12935] XFS (rnullb0): Invalid superblock magic number
[  591.036209][T12942] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  591.047540][T12943] /dev/rnullb0: Can't open blockdev
[  591.091648][T12944] /dev/rnullb0: Can't open blockdev
[  591.256426][T12948] NILFS (nullb0): couldn't find nilfs on the device
[  591.292165][T12952] /dev/rnullb0: Can't open blockdev
[  591.433124][T12955] /dev/rnullb0: Can't open blockdev
[  591.454073][T12958] /dev/rnullb0: Can't open blockdev
[  591.689040][T12965] /dev/rnullb0: Can't open blockdev
[  591.831192][ T5897] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  591.839596][T12942] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/rnullb0": -EINTR
[  591.926424][T12971] FAT-fs (rnullb0): bogus number of reserved sectors
[  591.951739][T12971] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  592.006224][ T5897] usb 6-1: Using ep0 maxpacket: 32
[  592.024266][ T5897] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  592.048778][ T5897] usb 6-1: config 0 has no interface number 0
[  592.072474][ T5897] usb 6-1: config 0 interface 89 has no altsetting 0
[  592.108259][ T5897] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  592.128165][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.165891][ T5897] usb 6-1: Product: syz
[  592.180350][ T5897] usb 6-1: Manufacturer: syz
[  592.194926][ T5897] usb 6-1: SerialNumber: syz
[  592.223146][ T5897] usb 6-1: config 0 descriptor??
[  592.255982][ T5897] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  592.273905][ T5897] em28xx 6-1:0.89: Video interface 89 found: bulk
[  592.296450][T12985] FAULT_INJECTION: forcing a failure.
[  592.296450][T12985] name failslab, interval 1, probability 0, space 0, times 0
[  592.353570][T12985] CPU: 1 UID: 0 PID: 12985 Comm: syz.4.2088 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  592.353596][T12985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  592.353606][T12985] Call Trace:
[  592.353614][T12985]  <TASK>
[  592.353622][T12985]  dump_stack_lvl+0x189/0x250
[  592.353648][T12985]  ? __pfx____ratelimit+0x10/0x10
[  592.353674][T12985]  ? __pfx_dump_stack_lvl+0x10/0x10
[  592.353694][T12985]  ? __pfx__printk+0x10/0x10
[  592.353722][T12985]  ? __pfx___might_resched+0x10/0x10
[  592.353742][T12985]  ? fs_reclaim_acquire+0x7d/0x100
[  592.353768][T12985]  should_fail_ex+0x414/0x560
[  592.353794][T12985]  should_failslab+0xa8/0x100
[  592.353815][T12985]  __kmalloc_noprof+0xcb/0x4f0
[  592.353833][T12985]  ? tls_get_rec+0xbf/0x670
[  592.353858][T12985]  ? __local_bh_enable_ip+0x12d/0x1c0
[  592.353882][T12985]  tls_get_rec+0xbf/0x670
[  592.353910][T12985]  tls_sw_sendmsg+0x4ae/0x23d0
[  592.353943][T12985]  ? __pfx___might_resched+0x10/0x10
[  592.353983][T12985]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  592.353999][T12985]  ? __lock_acquire+0xab9/0xd20
[  592.354020][T12985]  ? __pfx_aa_sk_perm+0x10/0x10
[  592.354040][T12985]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  592.354063][T12985]  ? sock_rps_record_flow+0x19/0x410
[  592.354086][T12985]  ? inet_getname+0x387/0x3c0
[  592.354106][T12985]  ? inet6_sendmsg+0x101/0x120
[  592.354127][T12985]  __sock_sendmsg+0xe5/0x270
[  592.354149][T12985]  sock_sendmsg+0x158/0x230
[  592.354169][T12985]  ? __pfx_sock_sendmsg+0x10/0x10
[  592.354201][T12985]  ? __asan_memset+0x22/0x50
[  592.354223][T12985]  ? iov_iter_bvec+0xb8/0x180
[  592.354243][T12985]  splice_to_socket+0x8ff/0xf10
[  592.354286][T12985]  ? __pfx_splice_to_socket+0x10/0x10
[  592.354305][T12985]  ? current_time+0x222/0x370
[  592.354345][T12985]  ? touch_atime+0xf1/0x6d0
[  592.354383][T12985]  ? __pfx_splice_to_socket+0x10/0x10
[  592.354403][T12985]  direct_splice_actor+0xfe/0x160
[  592.354428][T12985]  splice_direct_to_actor+0x5a8/0xcc0
[  592.354469][T12985]  ? __pfx_direct_splice_actor+0x10/0x10
[  592.354489][T12985]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  592.354520][T12985]  do_splice_direct+0x181/0x270
[  592.354543][T12985]  ? __pfx_do_splice_direct+0x10/0x10
[  592.354561][T12985]  ? common_file_perm+0x1b5/0x230
[  592.354583][T12985]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  592.354607][T12985]  ? bpf_lsm_file_permission+0x9/0x20
[  592.354621][T12985]  ? security_file_permission+0x75/0x290
[  592.354642][T12985]  ? rw_verify_area+0x255/0x4d0
[  592.354665][T12985]  do_sendfile+0x4da/0x7e0
[  592.354681][T12985]  ? __pfx_vfs_write+0x10/0x10
[  592.354706][T12985]  ? __pfx_do_sendfile+0x10/0x10
[  592.354735][T12985]  __se_sys_sendfile64+0x13e/0x190
[  592.354760][T12985]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  592.354787][T12985]  ? do_syscall_64+0xbe/0x3b0
[  592.354813][T12985]  do_syscall_64+0xfa/0x3b0
[  592.354832][T12985]  ? lockdep_hardirqs_on+0x9c/0x150
[  592.354858][T12985]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.354874][T12985]  ? clear_bhb_loop+0x60/0xb0
[  592.354894][T12985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.354909][T12985] RIP: 0033:0x7eff3698e9a9
[  592.354925][T12985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  592.354939][T12985] RSP: 002b:00007eff378a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  592.354957][T12985] RAX: ffffffffffffffda RBX: 00007eff36bb6080 RCX: 00007eff3698e9a9
[  592.354970][T12985] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  592.354980][T12985] RBP: 00007eff378a3090 R08: 0000000000000000 R09: 0000000000000000
[  592.354991][T12985] R10: 00000ffffffff004 R11: 0000000000000246 R12: 0000000000000002
[  592.355002][T12985] R13: 0000000000000001 R14: 00007eff36bb6080 R15: 00007ffc17e96658
[  592.355031][T12985]  </TASK>
[  593.157120][ T5897] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  594.268374][ T5897] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  594.279049][ T5897] em28xx 6-1:0.89: board has no eeprom
[  594.340756][ T5897] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[  594.348234][ T5897] em28xx 6-1:0.89: analog set to bulk mode.
[  594.374869][ T5890] em28xx 6-1:0.89: Registering V4L2 extension
[  594.411422][ T5897] usb 6-1: USB disconnect, device number 9
[  594.451070][ T5897] em28xx 6-1:0.89: Disconnecting em28xx
[  594.495636][ T5890] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[  594.510816][ T5890] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[  594.529914][ T5890] em28xx 6-1:0.89: No AC97 audio processor
[  594.554047][ T5890] usb 6-1: Decoder not found
[  594.573868][ T5890] em28xx 6-1:0.89: failed to create media graph
[  594.602445][ T5890] em28xx 6-1:0.89: V4L2 device video103 deregistered
[  594.621659][ T5890] em28xx 6-1:0.89: Registering snapshot button...
[  594.638404][ T5890] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input74
[  594.671299][ T5890] em28xx 6-1:0.89: Remote control support is not available for this card.
[  594.690586][ T5897] em28xx 6-1:0.89: Closing input extension
[  594.700902][ T5897] em28xx 6-1:0.89: Deregistering snapshot button
[  594.774348][ T5897] em28xx 6-1:0.89: Freeing device
[  595.140957][ T5897] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  595.338274][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  595.349161][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  595.369765][ T5897] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  595.387081][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  595.407928][ T5897] usb 6-1: SerialNumber: syz
[  596.777036][T13014] /dev/rnullb0: Can't open blockdev
[  596.994782][T13021] /dev/rnullb0: Can't open blockdev
[  597.450761][ T5890] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  597.612886][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  597.630814][ T5890] usb 1-1: config 0 has no interfaces?
[  597.646727][ T5890] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  597.679548][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.744068][ T5890] usb 1-1: config 0 descriptor??
[  598.120931][ T5934] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  598.280743][ T5934] usb 5-1: Using ep0 maxpacket: 32
[  598.292507][ T5934] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  598.302597][ T5934] usb 5-1: config 0 has no interface number 0
[  598.308940][ T5934] usb 5-1: config 0 interface 89 has no altsetting 0
[  598.333373][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.339618][ T5934] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  598.355287][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.370793][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.379460][ T5934] usb 5-1: Product: syz
[  598.389893][ T5934] usb 5-1: Manufacturer: syz
[  598.395059][ T5934] usb 5-1: SerialNumber: syz
[  598.413373][ T5934] usb 5-1: config 0 descriptor??
[  598.423469][ T5934] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  598.441015][ T5934] em28xx 5-1:0.89: Video interface 89 found: bulk
[  598.586514][ T5897] usb 6-1: 0:2 : does not exist
[  598.621003][ T5897] usb 6-1: unit 5: unexpected type 0x03
[  598.661313][ T5897] usb 6-1: USB disconnect, device number 10
[  598.724732][ T9097] udevd[9097]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  598.743813][T13031] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856973526 (22855788208 ns) > initial count (15481779200 ns). Using initial count to start timer.
[  598.807976][T13029] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3056472851 (48903565616 ns) > initial count (21898909424 ns). Using initial count to start timer.
[  599.028366][ T5934] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  600.185809][ T5934] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  600.220960][ T5934] em28xx 5-1:0.89: board has no eeprom
[  600.300715][ T5934] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  600.324780][ T5934] em28xx 5-1:0.89: analog set to bulk mode.
[  600.346319][ T5879] em28xx 5-1:0.89: Registering V4L2 extension
[  600.373732][ T5934] usb 5-1: USB disconnect, device number 87
[  600.404433][ T5934] em28xx 5-1:0.89: Disconnecting em28xx
[  600.474973][ T5879] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  600.490028][ T5879] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  600.510227][ T5879] em28xx 5-1:0.89: No AC97 audio processor
[  600.533587][ T5879] usb 5-1: Decoder not found
[  600.544269][ T5879] em28xx 5-1:0.89: failed to create media graph
[  600.560790][ T5879] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  600.579311][ T5879] em28xx 5-1:0.89: Registering snapshot button...
[  600.599773][ T5879] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input75
[  600.633031][ T5879] em28xx 5-1:0.89: Remote control support is not available for this card.
[  600.650754][ T5934] em28xx 5-1:0.89: Closing input extension
[  600.660740][ T5934] em28xx 5-1:0.89: Deregistering snapshot button
[  600.690864][ T5913] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  600.709556][ T5934] em28xx 5-1:0.89: Freeing device
[  600.860896][ T5913] usb 6-1: Using ep0 maxpacket: 16
[  600.868901][ T5913] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  600.890750][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.896436][T13055] tmpfs: Bad value for 'mpol'
[  600.955618][ T5913] usb 6-1: config 0 descriptor??
[  601.348476][ T5913] gspca_main: sonixj-2.14.0 probing 0471:0327
[  601.405850][ T5934] usb 1-1: USB disconnect, device number 122
[  601.515231][T13068] FAULT_INJECTION: forcing a failure.
[  601.515231][T13068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  601.534394][T13068] CPU: 1 UID: 0 PID: 13068 Comm: syz.0.2113 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  601.534426][T13068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  601.534437][T13068] Call Trace:
[  601.534445][T13068]  <TASK>
[  601.534453][T13068]  dump_stack_lvl+0x189/0x250
[  601.534480][T13068]  ? __pfx____ratelimit+0x10/0x10
[  601.534504][T13068]  ? __pfx_dump_stack_lvl+0x10/0x10
[  601.534525][T13068]  ? __pfx__printk+0x10/0x10
[  601.534549][T13068]  ? __pfx_binder_debug+0x10/0x10
[  601.534578][T13068]  should_fail_ex+0x414/0x560
[  601.534603][T13068]  _copy_to_user+0x31/0xb0
[  601.534624][T13068]  binder_ioctl_write_read+0x9554/0xa040
[  601.534668][T13068]  ? __kernel_text_address+0xd/0x40
[  601.534688][T13068]  ? arch_stack_walk+0xfc/0x150
[  601.534719][T13068]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  601.534740][T13068]  ? stack_trace_save+0x9c/0xe0
[  601.534765][T13068]  ? stack_depot_save_flags+0x40/0x900
[  601.534794][T13068]  ? kasan_save_track+0x4f/0x80
[  601.534809][T13068]  ? kasan_save_track+0x3e/0x80
[  601.534823][T13068]  ? kasan_save_free_info+0x46/0x50
[  601.534842][T13068]  ? __kasan_slab_free+0x62/0x70
[  601.534857][T13068]  ? kfree+0x18e/0x440
[  601.534872][T13068]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  601.534890][T13068]  ? security_file_ioctl+0xcb/0x2d0
[  601.534908][T13068]  ? __se_sys_ioctl+0x47/0x170
[  601.534925][T13068]  ? do_syscall_64+0xfa/0x3b0
[  601.534945][T13068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.534971][T13068]  ? __lock_acquire+0xab9/0xd20
[  601.534988][T13068]  ? binder_debug+0x13f/0x1b0
[  601.535014][T13068]  ? __pfx_binder_debug+0x10/0x10
[  601.535034][T13068]  ? do_raw_spin_lock+0x121/0x290
[  601.535071][T13068]  ? _raw_spin_unlock+0x28/0x50
[  601.535090][T13068]  ? binder_get_thread+0x178/0x6d0
[  601.535116][T13068]  binder_ioctl+0x3e0/0x19c0
[  601.535133][T13068]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  601.535155][T13068]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  601.535177][T13068]  ? do_vfs_ioctl+0xbe8/0x1430
[  601.535196][T13068]  ? __pfx_binder_ioctl+0x10/0x10
[  601.535211][T13068]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  601.535243][T13068]  ? __lock_acquire+0xab9/0xd20
[  601.535279][T13068]  ? __fget_files+0x2a/0x420
[  601.535304][T13068]  ? __fget_files+0x2a/0x420
[  601.535324][T13068]  ? __fget_files+0x3a0/0x420
[  601.535344][T13068]  ? __fget_files+0x2a/0x420
[  601.535368][T13068]  ? bpf_lsm_file_ioctl+0x9/0x20
[  601.535386][T13068]  ? __pfx_binder_ioctl+0x10/0x10
[  601.535402][T13068]  __se_sys_ioctl+0xf9/0x170
[  601.535432][T13068]  do_syscall_64+0xfa/0x3b0
[  601.535453][T13068]  ? lockdep_hardirqs_on+0x9c/0x150
[  601.535474][T13068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.535490][T13068]  ? clear_bhb_loop+0x60/0xb0
[  601.535508][T13068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.535523][T13068] RIP: 0033:0x7f0c3ab8e9a9
[  601.535538][T13068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  601.535550][T13068] RSP: 002b:00007f0c3b9f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  601.535568][T13068] RAX: ffffffffffffffda RBX: 00007f0c3adb5fa0 RCX: 00007f0c3ab8e9a9
[  601.535580][T13068] RDX: 0000200000000300 RSI: 00000000c0306201 RDI: 0000000000000005
[  601.535590][T13068] RBP: 00007f0c3b9f0090 R08: 0000000000000000 R09: 0000000000000000
[  601.535601][T13068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  601.535611][T13068] R13: 0000000000000000 R14: 00007f0c3adb5fa0 R15: 00007ffe28d3d818
[  601.535639][T13068]  </TASK>
[  601.535647][T13068] binder: 13067:13068 ioctl c0306201 200000000300 returned -14
[  602.560999][ T5879] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  602.753130][ T5879] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  602.780699][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0
[  602.794149][ T5879] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  602.804463][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  602.813260][ T5879] usb 5-1: Product: syz
[  602.818056][ T5879] usb 5-1: Manufacturer: syz
[  602.823420][ T5879] usb 5-1: SerialNumber: syz
[  602.834191][ T5879] usb 5-1: config 0 descriptor??
[  602.858608][ T5879] usb 5-1: selecting invalid altsetting 0
[  603.064753][ T5879] usb 5-1: USB disconnect, device number 88
[  603.077627][T13078] input: syz0 as /devices/virtual/input/input76
[  603.669005][   T30] audit: type=1326 audit(1753876044.760:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13094 comm="syz.0.2125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c3ab8e9a9 code=0x0
[  603.672094][T13097] FAULT_INJECTION: forcing a failure.
[  603.672094][T13097] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  603.713169][T13097] CPU: 0 UID: 0 PID: 13097 Comm: syz.4.2124 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  603.713196][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  603.713207][T13097] Call Trace:
[  603.713215][T13097]  <TASK>
[  603.713223][T13097]  dump_stack_lvl+0x189/0x250
[  603.713250][T13097]  ? __pfx____ratelimit+0x10/0x10
[  603.713280][T13097]  ? __pfx_dump_stack_lvl+0x10/0x10
[  603.713301][T13097]  ? __pfx__printk+0x10/0x10
[  603.713325][T13097]  ? __pfx_binder_debug+0x10/0x10
[  603.713355][T13097]  should_fail_ex+0x414/0x560
[  603.713380][T13097]  _copy_to_user+0x31/0xb0
[  603.713400][T13097]  binder_ioctl_write_read+0x9554/0xa040
[  603.713445][T13097]  ? __kernel_text_address+0xd/0x40
[  603.713465][T13097]  ? arch_stack_walk+0xfc/0x150
[  603.713496][T13097]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  603.713517][T13097]  ? stack_trace_save+0x9c/0xe0
[  603.713540][T13097]  ? stack_depot_save_flags+0x40/0x900
[  603.713569][T13097]  ? kasan_save_track+0x4f/0x80
[  603.713583][T13097]  ? kasan_save_track+0x3e/0x80
[  603.713597][T13097]  ? kasan_save_free_info+0x46/0x50
[  603.713616][T13097]  ? __kasan_slab_free+0x62/0x70
[  603.713631][T13097]  ? kfree+0x18e/0x440
[  603.713645][T13097]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  603.713664][T13097]  ? security_file_ioctl+0xcb/0x2d0
[  603.713681][T13097]  ? __se_sys_ioctl+0x47/0x170
[  603.713698][T13097]  ? do_syscall_64+0xfa/0x3b0
[  603.713718][T13097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.713743][T13097]  ? __lock_acquire+0xab9/0xd20
[  603.713760][T13097]  ? binder_debug+0x13f/0x1b0
[  603.713786][T13097]  ? __pfx_binder_debug+0x10/0x10
[  603.713805][T13097]  ? do_raw_spin_lock+0x121/0x290
[  603.713843][T13097]  ? _raw_spin_unlock+0x28/0x50
[  603.713862][T13097]  ? binder_get_thread+0x178/0x6d0
[  603.713888][T13097]  binder_ioctl+0x3e0/0x19c0
[  603.713903][T13097]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  603.713925][T13097]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  603.713948][T13097]  ? do_vfs_ioctl+0xbe8/0x1430
[  603.713966][T13097]  ? __pfx_binder_ioctl+0x10/0x10
[  603.713982][T13097]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  603.714013][T13097]  ? __lock_acquire+0xab9/0xd20
[  603.714049][T13097]  ? __fget_files+0x2a/0x420
[  603.714073][T13097]  ? __fget_files+0x2a/0x420
[  603.714093][T13097]  ? __fget_files+0x3a0/0x420
[  603.714113][T13097]  ? __fget_files+0x2a/0x420
[  603.714138][T13097]  ? bpf_lsm_file_ioctl+0x9/0x20
[  603.714157][T13097]  ? __pfx_binder_ioctl+0x10/0x10
[  603.714172][T13097]  __se_sys_ioctl+0xf9/0x170
[  603.714194][T13097]  do_syscall_64+0xfa/0x3b0
[  603.714215][T13097]  ? lockdep_hardirqs_on+0x9c/0x150
[  603.714236][T13097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.714252][T13097]  ? clear_bhb_loop+0x60/0xb0
[  603.714278][T13097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.714294][T13097] RIP: 0033:0x7eff3698e9a9
[  603.714311][T13097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  603.714325][T13097] RSP: 002b:00007eff378c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  603.714344][T13097] RAX: ffffffffffffffda RBX: 00007eff36bb5fa0 RCX: 00007eff3698e9a9
[  603.714357][T13097] RDX: 0000200000000300 RSI: 00000000c0306201 RDI: 0000000000000005
[  603.714369][T13097] RBP: 00007eff378c4090 R08: 0000000000000000 R09: 0000000000000000
[  603.714380][T13097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  603.714391][T13097] R13: 0000000000000000 R14: 00007eff36bb5fa0 R15: 00007ffc17e96658
[  603.714418][T13097]  </TASK>
[  603.714449][T13097] binder: 13095:13097 ioctl c0306201 200000000300 returned -14
[  603.853362][T13098] binder: 13094:13098 ioctl c0306201 2000000003c0 returned -14
[  603.856684][ T5913] gspca_sonixj: reg_r err -110
[  604.015664][    C0] vkms_vblank_simulate: vblank timer overrun
[  604.097277][ T5913] sonixj 6-1:0.0: probe with driver sonixj failed with error -110
[  604.180777][ T5890] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  604.314654][ T5890] usb 1-1: device descriptor read/64, error -71
[  604.489293][ T5913] usb 6-1: USB disconnect, device number 11
[  604.560773][ T5890] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  604.710941][ T5890] usb 1-1: device descriptor read/64, error -71
[  604.821334][ T5890] usb usb1-port1: attempt power cycle
[  604.900829][ T5913] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  605.092438][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  605.130842][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  605.150696][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  605.171038][ T5890] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  605.171109][ T5913] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  605.200715][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.202247][ T5890] usb 1-1: device descriptor read/8, error -71
[  605.221688][ T5913] usb 6-1: config 0 descriptor??
[  605.461520][ T5890] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  605.492261][ T5890] usb 1-1: device descriptor read/8, error -71
[  605.604918][ T5890] usb usb1-port1: unable to enumerate USB device
[  605.646598][ T5913] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  605.672092][ T5913] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  605.679058][ T5913] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  605.710869][ T5913] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  605.718000][ T5913] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  605.740752][ T5913] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  605.749715][ T5913] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  605.770726][ T5913] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  605.777569][ T5913] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  605.791239][ T5913] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  605.811365][ T5913] sony 0003:054C:024B.001C: unexpected long global item
[  605.843180][ T5913] sony 0003:054C:024B.001C: parse failed
[  605.846201][T13109] /dev/rnullb0: Can't open blockdev
[  605.869483][ T5913] sony 0003:054C:024B.001C: probe with driver sony failed with error -22
[  605.904731][ T5913] usb 6-1: USB disconnect, device number 12
[  606.128140][T13122] FAULT_INJECTION: forcing a failure.
[  606.128140][T13122] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  606.171083][T13122] CPU: 1 UID: 0 PID: 13122 Comm: syz.4.2134 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  606.171110][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  606.171121][T13122] Call Trace:
[  606.171130][T13122]  <TASK>
[  606.171137][T13122]  dump_stack_lvl+0x189/0x250
[  606.171163][T13122]  ? __pfx____ratelimit+0x10/0x10
[  606.171184][T13122]  ? __pfx_dump_stack_lvl+0x10/0x10
[  606.171205][T13122]  ? __pfx__printk+0x10/0x10
[  606.171227][T13122]  ? __might_fault+0xb0/0x130
[  606.171256][T13122]  should_fail_ex+0x414/0x560
[  606.171282][T13122]  _copy_from_user+0x2d/0xb0
[  606.171302][T13122]  kstrtouint_from_user+0xc4/0x170
[  606.171327][T13122]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  606.171366][T13122]  proc_fail_nth_write+0x88/0x200
[  606.171386][T13122]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  606.171408][T13122]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  606.171425][T13122]  vfs_write+0x27b/0xa90
[  606.171451][T13122]  ? __pfx_vfs_write+0x10/0x10
[  606.171473][T13122]  ? __fget_files+0x2a/0x420
[  606.171499][T13122]  ? __fget_files+0x3a0/0x420
[  606.171519][T13122]  ? __fget_files+0x2a/0x420
[  606.171549][T13122]  ksys_write+0x145/0x250
[  606.171568][T13122]  ? __fget_files+0x3a0/0x420
[  606.171590][T13122]  ? __pfx_ksys_write+0x10/0x10
[  606.171616][T13122]  ? do_syscall_64+0xbe/0x3b0
[  606.171641][T13122]  do_syscall_64+0xfa/0x3b0
[  606.171662][T13122]  ? lockdep_hardirqs_on+0x9c/0x150
[  606.171683][T13122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.171699][T13122]  ? clear_bhb_loop+0x60/0xb0
[  606.171720][T13122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.171736][T13122] RIP: 0033:0x7eff3698d45f
[  606.171752][T13122] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  606.171765][T13122] RSP: 002b:00007eff378c4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  606.171794][T13122] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007eff3698d45f
[  606.171807][T13122] RDX: 0000000000000001 RSI: 00007eff378c40a0 RDI: 0000000000000006
[  606.171818][T13122] RBP: 00007eff378c4090 R08: 0000000000000000 R09: 0000000000000000
[  606.171829][T13122] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  606.171839][T13122] R13: 0000000000000000 R14: 00007eff36bb5fa0 R15: 00007ffc17e96658
[  606.171869][T13122]  </TASK>
[  606.660776][T13098] binder: 13094:13098 ioctl c0306201 2000000001c0 returned -14
[  606.961094][ T5913] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  607.124926][ T5913] usb 6-1: Using ep0 maxpacket: 16
[  607.142482][ T5913] usb 6-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config
[  607.153935][ T5879] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[  607.171210][ T5913] usb 6-1: too many endpoints for config 1 interface 1 altsetting 0: 78, using maximum allowed: 30
[  607.194145][ T5913] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 78
[  607.223039][ T5913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  607.233644][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.251374][ T5913] usb 6-1: Product: syz
[  607.260726][ T5913] usb 6-1: Manufacturer: syz
[  607.265586][ T5913] usb 6-1: SerialNumber: syz
[  607.290915][ T5879] usb 1-1: device descriptor read/64, error -71
[  607.315847][ T5913] usb 6-1: selecting invalid altsetting 1
[  607.351341][ T5897] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  607.510521][ T5913] cdc_ncm 6-1:1.0: bind() failure
[  607.511118][ T5897] usb 5-1: Using ep0 maxpacket: 16
[  607.545746][ T5897] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  607.551845][ T5879] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  607.574828][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.591003][ T5913] usb 6-1: USB disconnect, device number 13
[  607.619183][ T5897] usb 5-1: config 0 descriptor??
[  607.667949][ T5897] gspca_main: sonixj-2.14.0 probing 0471:0327
[  607.750834][ T5879] usb 1-1: device descriptor read/64, error -71
[  607.861198][ T5879] usb usb1-port1: attempt power cycle
[  608.210909][ T5879] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  608.216754][T13137] random: crng reseeded on system resumption
[  608.251905][ T5879] usb 1-1: device descriptor read/8, error -71
[  608.490862][ T5879] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  608.521843][ T5879] usb 1-1: device descriptor read/8, error -71
[  608.640838][ T5879] usb usb1-port1: unable to enumerate USB device
[  608.700765][ T1073] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  608.854040][ T1073] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  608.872879][ T1073] usb 6-1: config 0 interface 0 has no altsetting 0
[  608.887680][ T1073] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  608.899509][ T1073] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.912272][ T1073] usb 6-1: Product: syz
[  608.918297][ T1073] usb 6-1: Manufacturer: syz
[  608.927108][ T1073] usb 6-1: SerialNumber: syz
[  608.943492][ T1073] usb 6-1: config 0 descriptor??
[  608.955442][ T1073] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  608.978081][ T1073] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  608.992130][ T1073] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  609.006323][ T1073] usb 6-1: media controller created
[  609.048426][ T1073] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  609.136221][ T1073] DVB: Unable to find symbol tda10046_attach()
[  609.144783][ T1073] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  609.165706][ T1073] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  609.382583][T13148] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2143'.
[  609.398457][T13148] 0��{X��: renamed from macvtap0 (while UP)
[  609.408741][T13148] 0��{X��: entered allmulticast mode
[  609.421715][T13148] veth0_macvtap: entered allmulticast mode
[  609.436612][T13148] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  609.687910][ T5897] gspca_sonixj: reg_r err -32
[  609.700521][ T5897] sonixj 5-1:0.0: probe with driver sonixj failed with error -32
[  609.841602][T13148] /dev/rnullb0: Can't open blockdev
[  609.866485][ T1073] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  609.881509][ T1073] usb 6-1: USB disconnect, device number 14
[  610.250913][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  610.417458][ T5879] usb 1-1: Using ep0 maxpacket: 32
[  610.437187][ T5879] usb 1-1: config 0 interface 0 has no altsetting 0
[  610.463964][ T5879] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  610.478679][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.487276][ T5879] usb 1-1: Product: syz
[  610.492556][ T5879] usb 1-1: Manufacturer: syz
[  610.497795][ T5879] usb 1-1: SerialNumber: syz
[  610.506306][ T5879] usb 1-1: config 0 descriptor??
[  610.804631][ T1073] usb 5-1: USB disconnect, device number 89
[  610.916551][ T5879] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  611.811033][ T5890] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  611.888224][ T5879] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  611.899878][ T5879] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  611.915232][ T5879] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  611.929564][ T5879] usb 1-1: USB disconnect, device number 5
[  612.010725][ T5890] usb 6-1: Using ep0 maxpacket: 16
[  612.022860][ T5890] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  612.040723][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  612.060710][ T5890] usb 6-1: config 0 has no interface number 0
[  612.073350][ T5890] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  612.091220][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.109700][ T5890] usb 6-1: Product: syz
[  612.119767][ T5890] usb 6-1: Manufacturer: syz
[  612.129890][ T5890] usb 6-1: SerialNumber: syz
[  612.141777][ T5890] usb 6-1: config 0 descriptor??
[  612.334080][ T5851] Bluetooth: hci4: unexpected event for opcode 0x0c2d
[  612.360256][ T5890] usb 6-1: Found UVC 0.00 device syz (046d:08d3)
[  612.396871][ T5890] usb 6-1: No valid video chain found.
[  612.427683][ T5890] usb 6-1: USB disconnect, device number 15
[  612.775224][T13192] /dev/rnullb0: Can't open blockdev
[  612.970933][T13196] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  612.983759][T13196] /dev/rnullb0: Can't open blockdev
[  613.080968][ T5934] usb 5-1: new low-speed USB device number 90 using dummy_hcd
[  613.241073][ T5934] usb 5-1: Invalid ep0 maxpacket: 32
[  613.374646][T13202] /dev/rnullb0: Can't open blockdev
[  613.385791][ T5934] usb 5-1: new low-speed USB device number 91 using dummy_hcd
[  613.514647][T13210] /dev/rnullb0: Can't open blockdev
[  613.568749][ T5934] usb 5-1: Invalid ep0 maxpacket: 32
[  613.577724][ T5934] usb usb5-port1: attempt power cycle
[  613.805692][T13224] /dev/rnullb0: Can't open blockdev
[  613.867218][T13226] IPVS: set_ctl: invalid protocol: 11612 172.30.1.6:20003
[  613.930836][ T5934] usb 5-1: new low-speed USB device number 92 using dummy_hcd
[  613.979890][ T5934] usb 5-1: Invalid ep0 maxpacket: 32
[  614.121453][ T5934] usb 5-1: new low-speed USB device number 93 using dummy_hcd
[  614.163688][ T5934] usb 5-1: Invalid ep0 maxpacket: 32
[  614.169739][ T5934] usb usb5-port1: unable to enumerate USB device
[  614.307243][T13247] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  614.319609][T13247] /dev/rnullb0: Can't open blockdev
[  614.466812][T13250] /dev/rnullb0: Can't open blockdev
[  614.770852][ T5890] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  614.922097][ T5890] usb 1-1: Using ep0 maxpacket: 8
[  614.954931][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short
[  614.999631][ T5890] usb 1-1: config 2 has an invalid interface number: 65 but max is 0
[  615.037121][ T5890] usb 1-1: config 2 has no interface number 0
[  615.048971][ T5890] usb 1-1: config 2 interface 65 has no altsetting 0
[  615.064862][ T5890] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=d8.44
[  615.082170][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.094784][ T5890] usb 1-1: Product: syz
[  615.099102][ T5890] usb 1-1: Manufacturer: syz
[  615.105867][ T5890] usb 1-1: SerialNumber: syz
[  615.300805][ T5934] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  615.332100][ T5890] ttusb_dec_send_command: command bulk message failed: error -22
[  615.353219][ T5890] ttusb-dec 1-1:2.65: probe with driver ttusb-dec failed with error -22
[  615.372599][ T5890] usb 1-1: USB disconnect, device number 6
[  615.430955][ T5934] usb 6-1: device descriptor read/64, error -71
[  615.670921][ T5934] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  615.810805][ T5934] usb 6-1: device descriptor read/64, error -71
[  615.924749][ T5934] usb usb6-port1: attempt power cycle
[  615.941513][T13256] /dev/rnullb0: Can't open blockdev
[  615.949946][T13256] /dev/rnullb0: Can't open blockdev
[  616.157296][T13268] 9pnet: p9_errstr2errno: server reported unknown error ��p��A���
��;
KZ�44�/@�q��:4001 00000000000000000000000000000000:
[  616.209145][T13269] openvswitch: netlink: VXLAN extension 206 out of range max 1
[  616.250818][ T5890] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  616.270774][ T5934] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  616.291487][ T5934] usb 6-1: device descriptor read/8, error -71
[  616.373840][ T5851] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  616.384466][ T5851] Bluetooth: hci4: Injecting HCI hardware error event
[  616.395214][ T5854] Bluetooth: hci4: hardware error 0x00
[  616.430834][ T5890] usb 1-1: Using ep0 maxpacket: 32
[  616.438359][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.449902][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.464480][ T5890] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  616.474137][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.490163][ T5890] usb 1-1: config 0 descriptor??
[  616.530777][ T5934] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  616.540938][ T5897] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  616.561546][ T5934] usb 6-1: device descriptor read/8, error -71
[  616.671165][ T5934] usb usb6-port1: unable to enumerate USB device
[  616.724671][ T5897] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  616.735756][ T5897] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.752760][ T5897] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  616.762355][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.770411][ T5897] usb 5-1: Product: syz
[  616.775815][ T5897] usb 5-1: Manufacturer: syz
[  616.780477][ T5897] usb 5-1: SerialNumber: syz
[  616.925754][T13273] /dev/rnullb0: Can't open blockdev
[  616.937118][ T5890] usbhid 1-1:0.0: can't add hid device: -71
[  616.953415][ T5890] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  617.003855][ T5890] usb 1-1: USB disconnect, device number 7
[  617.556734][T13276] syzkaller1: entered promiscuous mode
[  617.565015][T13276] syzkaller1: entered allmulticast mode
[  617.706106][T13278] /dev/rnullb0: Can't open blockdev
[  617.766908][T13280] /dev/rnullb0: Can't open blockdev
[  617.822356][T13282] /dev/rnullb0: Can't open blockdev
[  617.834846][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'.
[  617.836887][ T5897] cdc_ncm 5-1:1.0: bind() failure
[  617.864650][ T5897] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  617.875098][ T5897] cdc_ncm 5-1:1.1: bind() failure
[  618.043590][ T5934] usb 5-1: USB disconnect, device number 94
[  618.389950][T13293] /dev/rnullb0: Can't open blockdev
[  618.450862][ T5854] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  618.750888][ T5890] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  618.910798][ T5890] usb 6-1: Using ep0 maxpacket: 16
[  618.920177][ T5890] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  618.941484][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.973300][ T5890] usb 6-1: config 0 descriptor??
[  618.987209][ T5890] gspca_main: sonixj-2.14.0 probing 0471:0327
[  619.241207][T13320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2198'.
[  619.278155][T13320] netlink: 'syz.4.2198': attribute type 2 has an invalid length.
[  619.308996][T13320] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2198'.
[  620.020744][ T1073] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  620.168725][T13327] dvmrp0: entered allmulticast mode
[  620.183877][ T1073] usb 1-1: Using ep0 maxpacket: 8
[  620.202309][ T1073] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  620.220781][ T1073] usb 1-1: config 179 has no interface number 0
[  620.237391][ T1073] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  620.262160][ T1073] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  620.287026][ T1073] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  620.309375][ T1073] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  620.328448][ T1073] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  620.347062][ T1073] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  620.368280][ T1073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.378231][T13334] ieee802154 phy0 wpan0: encryption failed: -22
[  620.381144][T13325] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  620.416722][T13334] /dev/sg0: Can't lookup blockdev
[  620.620914][T13338] /dev/rnullb0: Can't open blockdev
[  620.656286][ T1073] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input78
[  620.834029][  T982] usb 1-1: USB disconnect, device number 8
[  620.834055][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  620.849072][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  621.056196][T13345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.074773][T13345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.291122][ T1073] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  621.440964][ T1073] usb 5-1: device descriptor read/64, error -71
[  621.461796][T13348] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2206'.
[  621.473858][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'.
[  621.596954][T13352] FAULT_INJECTION: forcing a failure.
[  621.596954][T13352] name failslab, interval 1, probability 0, space 0, times 0
[  621.598791][ T5890] gspca_sonixj: reg_w1 err -71
[  621.630440][T13352] CPU: 0 UID: 0 PID: 13352 Comm: syz.0.2207 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  621.630467][T13352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  621.630477][T13352] Call Trace:
[  621.630485][T13352]  <TASK>
[  621.630492][T13352]  dump_stack_lvl+0x189/0x250
[  621.630518][T13352]  ? __pfx____ratelimit+0x10/0x10
[  621.630540][T13352]  ? __pfx_dump_stack_lvl+0x10/0x10
[  621.630561][T13352]  ? __pfx__printk+0x10/0x10
[  621.630586][T13352]  ? __local_bh_enable_ip+0x12d/0x1c0
[  621.630605][T13352]  ? lockdep_hardirqs_on+0x9c/0x150
[  621.630632][T13352]  should_fail_ex+0x414/0x560
[  621.630655][T13352]  should_failslab+0xa8/0x100
[  621.630675][T13352]  __kmalloc_noprof+0xcb/0x4f0
[  621.630692][T13352]  ? skcipher_next_slow+0xee/0x230
[  621.630709][T13352]  ? skcipher_walk_next+0x7b3/0xbe0
[  621.630730][T13352]  skcipher_next_slow+0xee/0x230
[  621.630753][T13352]  gcm_encrypt_aesni_avx+0x5a0/0x5f0
[  621.630781][T13352]  ? __pfx_gcm_encrypt_aesni_avx+0x10/0x10
[  621.630814][T13352]  ? __lock_acquire+0xab9/0xd20
[  621.630839][T13352]  ? tls_push_record+0x13a6/0x3770
[  621.630865][T13352]  tls_push_record+0x19c5/0x3770
[  621.630917][T13352]  ? __pfx_tls_push_record+0x10/0x10
[  621.630935][T13352]  ? get_page_from_freelist+0x21ff/0x22c0
[  621.630955][T13352]  ? __pfx_sk_psock_get+0x10/0x10
[  621.630984][T13352]  bpf_exec_tx_verdict+0xefb/0x15e0
[  621.631009][T13352]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  621.631043][T13352]  ? __pfx_bpf_exec_tx_verdict+0x10/0x10
[  621.631137][T13352]  ? iov_iter_extract_bvec_pages+0x729/0x7d0
[  621.631169][T13352]  tls_sw_sendmsg+0x163d/0x23d0
[  621.631221][T13352]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  621.631238][T13352]  ? __lock_acquire+0xab9/0xd20
[  621.631258][T13352]  ? __pfx_aa_sk_perm+0x10/0x10
[  621.631278][T13352]  ? sock_rps_record_flow+0x19/0x410
[  621.631300][T13352]  ? inet_getname+0x387/0x3c0
[  621.631320][T13352]  ? inet6_sendmsg+0x101/0x120
[  621.631342][T13352]  __sock_sendmsg+0xe5/0x270
[  621.631366][T13352]  sock_sendmsg+0x158/0x230
[  621.631388][T13352]  ? __pfx_sock_sendmsg+0x10/0x10
[  621.631421][T13352]  ? __asan_memset+0x22/0x50
[  621.631443][T13352]  ? iov_iter_bvec+0xb8/0x180
[  621.631462][T13352]  splice_to_socket+0x8ff/0xf10
[  621.631505][T13352]  ? __pfx_splice_to_socket+0x10/0x10
[  621.631523][T13352]  ? current_time+0x222/0x370
[  621.631564][T13352]  ? touch_atime+0xf1/0x6d0
[  621.631602][T13352]  ? __pfx_splice_to_socket+0x10/0x10
[  621.631624][T13352]  direct_splice_actor+0xfe/0x160
[  621.631648][T13352]  splice_direct_to_actor+0x5a8/0xcc0
[  621.631688][T13352]  ? __pfx_direct_splice_actor+0x10/0x10
[  621.631709][T13352]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  621.631740][T13352]  do_splice_direct+0x181/0x270
[  621.631763][T13352]  ? __pfx_do_splice_direct+0x10/0x10
[  621.631781][T13352]  ? common_file_perm+0x1b5/0x230
[  621.631802][T13352]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  621.631826][T13352]  ? bpf_lsm_file_permission+0x9/0x20
[  621.631841][T13352]  ? security_file_permission+0x75/0x290
[  621.631862][T13352]  ? rw_verify_area+0x255/0x4d0
[  621.631885][T13352]  do_sendfile+0x4da/0x7e0
[  621.631906][T13352]  ? __pfx_vfs_write+0x10/0x10
[  621.631931][T13352]  ? __pfx_do_sendfile+0x10/0x10
[  621.631948][T13352]  ? __fget_files+0x3a0/0x420
[  621.631979][T13352]  __se_sys_sendfile64+0x13e/0x190
[  621.632004][T13352]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  621.632032][T13352]  ? do_syscall_64+0xbe/0x3b0
[  621.632058][T13352]  do_syscall_64+0xfa/0x3b0
[  621.632077][T13352]  ? lockdep_hardirqs_on+0x9c/0x150
[  621.632096][T13352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.632112][T13352]  ? clear_bhb_loop+0x60/0xb0
[  621.632132][T13352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.632148][T13352] RIP: 0033:0x7f0c3ab8e9a9
[  621.632164][T13352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.632177][T13352] RSP: 002b:00007f0c3b9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  621.632196][T13352] RAX: ffffffffffffffda RBX: 00007f0c3adb6080 RCX: 00007f0c3ab8e9a9
[  621.632208][T13352] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  621.632218][T13352] RBP: 00007f0c3b9cf090 R08: 0000000000000000 R09: 0000000000000000
[  621.632229][T13352] R10: 00000ffffffff004 R11: 0000000000000246 R12: 0000000000000002
[  621.632240][T13352] R13: 0000000000000001 R14: 00007f0c3adb6080 R15: 00007ffe28d3d818
[  621.632267][T13352]  </TASK>
[  621.639487][ T5890] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  622.085600][ T1073] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  622.098688][ T5890] usb 6-1: USB disconnect, device number 20
[  622.220744][ T1073] usb 5-1: device descriptor read/64, error -71
[  622.242216][T13355] netlink: 'syz.5.2208': attribute type 16 has an invalid length.
[  622.336380][ T1073] usb usb5-port1: attempt power cycle
[  622.690778][ T1073] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  622.723405][ T1073] usb 5-1: device descriptor read/8, error -71
[  622.970894][ T1073] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  623.001568][ T1073] usb 5-1: device descriptor read/8, error -71
[  623.123180][ T1073] usb usb5-port1: unable to enumerate USB device
[  624.360845][ T5890] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  624.532448][ T5890] usb 5-1: Using ep0 maxpacket: 32
[  624.538204][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  624.546056][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  624.557315][ T5890] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  624.566193][ T5890] usb 5-1: config 0 has no interface number 0
[  624.576282][ T5890] usb 5-1: config 0 interface 89 has no altsetting 0
[  624.588495][ T5890] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  624.602063][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.610251][ T5890] usb 5-1: Product: syz
[  624.620015][ T5890] usb 5-1: Manufacturer: syz
[  624.627232][ T5890] usb 5-1: SerialNumber: syz
[  624.637326][ T5890] usb 5-1: config 0 descriptor??
[  624.659129][ T5890] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  624.677188][ T5890] em28xx 5-1:0.89: Video interface 89 found: bulk
[  624.760729][ T5934] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  624.822642][T13389] FAULT_INJECTION: forcing a failure.
[  624.822642][T13389] name failslab, interval 1, probability 0, space 0, times 0
[  624.863465][T13389] CPU: 0 UID: 0 PID: 13389 Comm: syz.5.2218 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  624.863492][T13389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  624.863503][T13389] Call Trace:
[  624.863511][T13389]  <TASK>
[  624.863519][T13389]  dump_stack_lvl+0x189/0x250
[  624.863546][T13389]  ? __pfx____ratelimit+0x10/0x10
[  624.863569][T13389]  ? __pfx_dump_stack_lvl+0x10/0x10
[  624.863590][T13389]  ? __pfx__printk+0x10/0x10
[  624.863619][T13389]  ? __pfx___might_resched+0x10/0x10
[  624.863637][T13389]  ? fs_reclaim_acquire+0x7d/0x100
[  624.863662][T13389]  should_fail_ex+0x414/0x560
[  624.863688][T13389]  should_failslab+0xa8/0x100
[  624.863710][T13389]  __kmalloc_noprof+0xcb/0x4f0
[  624.863733][T13389]  ? tls_get_rec+0xbf/0x670
[  624.863752][T13389]  ? __local_bh_enable_ip+0x12d/0x1c0
[  624.863775][T13389]  tls_get_rec+0xbf/0x670
[  624.863804][T13389]  tls_sw_sendmsg+0x4ae/0x23d0
[  624.863836][T13389]  ? __pfx___might_resched+0x10/0x10
[  624.863876][T13389]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  624.863893][T13389]  ? __lock_acquire+0xab9/0xd20
[  624.863914][T13389]  ? __pfx_aa_sk_perm+0x10/0x10
[  624.863934][T13389]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  624.863957][T13389]  ? sock_rps_record_flow+0x19/0x410
[  624.863980][T13389]  ? inet_getname+0x387/0x3c0
[  624.864002][T13389]  ? inet6_sendmsg+0x101/0x120
[  624.864025][T13389]  __sock_sendmsg+0xe5/0x270
[  624.864050][T13389]  sock_sendmsg+0x158/0x230
[  624.864074][T13389]  ? __pfx_sock_sendmsg+0x10/0x10
[  624.864108][T13389]  ? __asan_memset+0x22/0x50
[  624.864130][T13389]  ? iov_iter_bvec+0xb8/0x180
[  624.864151][T13389]  splice_to_socket+0x8ff/0xf10
[  624.864196][T13389]  ? __pfx_splice_to_socket+0x10/0x10
[  624.864215][T13389]  ? current_time+0x222/0x370
[  624.864258][T13389]  ? touch_atime+0xf1/0x6d0
[  624.864298][T13389]  ? __pfx_splice_to_socket+0x10/0x10
[  624.864320][T13389]  direct_splice_actor+0xfe/0x160
[  624.864346][T13389]  splice_direct_to_actor+0x5a8/0xcc0
[  624.864387][T13389]  ? __pfx_direct_splice_actor+0x10/0x10
[  624.864409][T13389]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  624.864442][T13389]  do_splice_direct+0x181/0x270
[  624.864465][T13389]  ? __pfx_do_splice_direct+0x10/0x10
[  624.864485][T13389]  ? common_file_perm+0x1b5/0x230
[  624.864507][T13389]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  624.864532][T13389]  ? bpf_lsm_file_permission+0x9/0x20
[  624.864548][T13389]  ? security_file_permission+0x75/0x290
[  624.864569][T13389]  ? rw_verify_area+0x255/0x4d0
[  624.864593][T13389]  do_sendfile+0x4da/0x7e0
[  624.864609][T13389]  ? __pfx_vfs_write+0x10/0x10
[  624.864636][T13389]  ? __pfx_do_sendfile+0x10/0x10
[  624.864653][T13389]  ? __fget_files+0x3a0/0x420
[  624.864686][T13389]  __se_sys_sendfile64+0x13e/0x190
[  624.864712][T13389]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  624.864746][T13389]  ? do_syscall_64+0xbe/0x3b0
[  624.864772][T13389]  do_syscall_64+0xfa/0x3b0
[  624.864792][T13389]  ? lockdep_hardirqs_on+0x9c/0x150
[  624.864813][T13389]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.864829][T13389]  ? clear_bhb_loop+0x60/0xb0
[  624.864850][T13389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.864866][T13389] RIP: 0033:0x7ff42398e9a9
[  624.864883][T13389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  624.864897][T13389] RSP: 002b:00007ff424731038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  624.864916][T13389] RAX: ffffffffffffffda RBX: 00007ff423bb6080 RCX: 00007ff42398e9a9
[  624.864928][T13389] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  624.864939][T13389] RBP: 00007ff424731090 R08: 0000000000000000 R09: 0000000000000000
[  624.864950][T13389] R10: 00000ffffffff004 R11: 0000000000000246 R12: 0000000000000002
[  624.864961][T13389] R13: 0000000000000001 R14: 00007ff423bb6080 R15: 00007ffd300b8378
[  624.864991][T13389]  </TASK>
[  625.268245][ T5890] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  625.281449][ T5934] usb 1-1: Using ep0 maxpacket: 16
[  625.289347][ T5934] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  625.298953][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.314305][ T5934] usb 1-1: config 0 descriptor??
[  625.323012][ T5934] gspca_main: sonixj-2.14.0 probing 0471:0327
[  625.759046][T13391] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2219'.
[  625.794344][T13391] /dev/rnullb0: Can't open blockdev
[  626.151008][ T5879] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  626.156472][ T5890] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  626.169047][ T5890] em28xx 5-1:0.89: board has no eeprom
[  626.233372][ T5890] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  626.241576][ T5890] em28xx 5-1:0.89: analog set to bulk mode.
[  626.247555][ T5933] em28xx 5-1:0.89: Registering V4L2 extension
[  626.276823][ T5890] usb 5-1: USB disconnect, device number 99
[  626.298644][ T5890] em28xx 5-1:0.89: Disconnecting em28xx
[  626.344727][ T5879] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  626.380839][ T5879] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  626.405938][ T5879] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  626.417302][ T5879] usb 6-1: config 220 has no interface number 2
[  626.427262][ T5933] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  626.439280][ T5879] usb 6-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 991
[  626.461133][ T5933] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  626.476078][ T5879] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  626.488633][ T5933] em28xx 5-1:0.89: No AC97 audio processor
[  626.493918][ T5879] usb 6-1: config 220 interface 0 has no altsetting 0
[  626.503389][ T5879] usb 6-1: config 220 interface 76 has no altsetting 0
[  626.510432][ T5933] usb 5-1: Decoder not found
[  626.510450][ T5933] em28xx 5-1:0.89: failed to create media graph
[  626.510469][ T5933] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  626.512077][ T5933] em28xx 5-1:0.89: Registering snapshot button...
[  626.516559][ T5879] usb 6-1: config 220 interface 1 has no altsetting 0
[  626.536422][ T5933] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input79
[  626.547427][ T5879] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  626.562458][ T5933] em28xx 5-1:0.89: Remote control support is not available for this card.
[  626.578364][ T5890] em28xx 5-1:0.89: Closing input extension
[  626.580846][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.584550][ T5890] em28xx 5-1:0.89: Deregistering snapshot button
[  626.603355][ T5879] usb 6-1: Product: syz
[  626.607724][ T5879] usb 6-1: Manufacturer: syz
[  626.614048][ T5879] usb 6-1: SerialNumber: syz
[  626.615810][ T5890] em28xx 5-1:0.89: Freeing device
[  626.844084][T13393] /dev/rnullb0: Can't open blockdev
[  626.874693][ T5879] uvcvideo 6-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  626.885483][T13398] /dev/rnullb0: Can't open blockdev
[  626.907185][ T5879] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  626.925090][ T5879] usb 6-1: No valid video chain found.
[  626.937995][ T5879] usb 6-1: selecting invalid altsetting 0
[  626.978379][ T5879] usb 6-1: selecting invalid altsetting 0
[  626.991839][ T5879] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  627.006295][ T5879] usb 6-1: USB disconnect, device number 21
[  627.035855][T13400] /dev/rnullb0: Can't open blockdev
[  627.167818][T13402] /dev/rnullb0: Can't open blockdev
[  627.355166][T13407] blktrace: Concurrent blktraces are not allowed on rnullb0
[  627.701085][ T5879] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  627.777591][ T5934] gspca_sonixj: reg_w1 err -71
[  627.782708][ T5934] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  627.806617][ T5934] usb 1-1: USB disconnect, device number 9
[  627.880719][ T5879] usb 6-1: Using ep0 maxpacket: 16
[  627.887728][ T5879] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  627.904278][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.921466][ T5879] usb 6-1: config 0 descriptor??
[  627.933835][ T5879] gspca_main: sonixj-2.14.0 probing 0471:0327
[  627.960784][  T982] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  628.120749][  T982] usb 5-1: Using ep0 maxpacket: 8
[  628.128232][  T982] usb 5-1: config 0 has an invalid interface number: 200 but max is 0
[  628.141228][  T982] usb 5-1: config 0 has no interface number 0
[  628.147697][  T982] usb 5-1: config 0 interface 200 has no altsetting 0
[  628.157599][  T982] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  628.168449][  T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.177063][  T982] usb 5-1: Product: syz
[  628.182287][  T982] usb 5-1: Manufacturer: syz
[  628.187024][  T982] usb 5-1: SerialNumber: syz
[  628.205739][  T982] usb 5-1: config 0 descriptor??
[  628.336526][T13420] Bluetooth: MGMT ver 1.23
[  628.414193][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'.
[  628.450563][  T982] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input80
[  628.498731][  T982] usb 5-1: USB disconnect, device number 100
[  628.691099][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  628.749601][ T5879] gspca_sonixj: reg_r err -32
[  628.759808][ T5879] sonixj 6-1:0.0: probe with driver sonixj failed with error -32
[  628.860746][    T9] usb 1-1: Using ep0 maxpacket: 32
[  628.868105][    T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  628.880518][    T9] usb 1-1: config 0 has no interface number 0
[  628.889270][    T9] usb 1-1: config 0 interface 184 has no altsetting 0
[  628.902265][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  628.915411][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.928516][    T9] usb 1-1: Product: syz
[  628.936752][    T9] usb 1-1: Manufacturer: syz
[  628.941850][    T9] usb 1-1: SerialNumber: syz
[  628.953005][    T9] usb 1-1: config 0 descriptor??
[  628.970153][    T9] smsc75xx v1.0.0
[  629.320905][ T5890] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  629.480880][ T5890] usb 5-1: Using ep0 maxpacket: 32
[  629.492085][ T5890] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  629.500983][ T5890] usb 5-1: config 0 has no interface number 0
[  629.507376][ T5890] usb 5-1: config 0 interface 89 has no altsetting 0
[  629.519129][ T5890] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  629.536660][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.564913][ T5890] usb 5-1: Product: syz
[  629.577436][ T5890] usb 5-1: Manufacturer: syz
[  629.578001][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  629.590844][ T5890] usb 5-1: SerialNumber: syz
[  629.608150][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  629.612796][ T5890] usb 5-1: config 0 descriptor??
[  629.632309][ T5890] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  629.642112][ T5890] em28xx 5-1:0.89: Video interface 89 found: bulk
[  630.236211][ T5890] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  630.489362][  T982] usb 6-1: USB disconnect, device number 22
[  630.628980][T13424] /dev/rnullb0: Can't open blockdev
[  630.653634][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  630.690935][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71
[  630.708811][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  630.741277][    T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[  630.770519][    T9] usb 1-1: USB disconnect, device number 10
[  631.651131][    T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  631.662252][ T5890] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  631.670465][ T5890] em28xx 5-1:0.89: board has no eeprom
[  631.754102][ T5890] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  631.770787][ T5890] em28xx 5-1:0.89: analog set to bulk mode.
[  631.776794][ T5933] em28xx 5-1:0.89: Registering V4L2 extension
[  631.803475][ T5890] usb 5-1: USB disconnect, device number 101
[  631.833195][    T9] usb 1-1: Using ep0 maxpacket: 16
[  631.860317][ T5890] em28xx 5-1:0.89: Disconnecting em28xx
[  631.860810][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  631.881912][ T5933] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  631.893612][ T5933] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  631.899145][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  631.901344][ T5933] em28xx 5-1:0.89: No AC97 audio processor
[  631.925248][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  631.939549][ T5933] usb 5-1: Decoder not found
[  631.950809][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  631.954597][ T5933] em28xx 5-1:0.89: failed to create media graph
[  631.978858][ T5933] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  631.980707][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.998799][ T5933] em28xx 5-1:0.89: Registering snapshot button...
[  632.002930][T13449] netlink: 'syz.5.2238': attribute type 4 has an invalid length.
[  632.020377][ T5933] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input81
[  632.021545][    T9] usb 1-1: config 0 descriptor??
[  632.047688][T13450] /dev/rnullb0: Can't open blockdev
[  632.059353][ T5933] em28xx 5-1:0.89: Remote control support is not available for this card.
[  632.079533][ T5890] em28xx 5-1:0.89: Closing input extension
[  632.099754][ T5890] em28xx 5-1:0.89: Deregistering snapshot button
[  632.126575][ T5890] em28xx 5-1:0.89: Freeing device
[  632.287297][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001D/input/input82
[  632.296875][T13458] /dev/rnullb0: Can't open blockdev
[  632.433761][    T9] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  632.452866][T13443] /dev/rnullb0: Can't open blockdev
[  632.539542][    T9] usb 1-1: USB disconnect, device number 11
[  632.687888][T13461] fido_id[13461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  632.781050][  T982] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  632.930729][  T982] usb 5-1: Using ep0 maxpacket: 16
[  632.943330][  T982] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  632.960774][  T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.991286][  T982] usb 5-1: config 0 descriptor??
[  633.041234][  T982] gspca_main: sonixj-2.14.0 probing 0471:0327
[  633.750785][ T5890] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  633.770816][ T1073] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  633.912837][ T5890] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  633.921307][ T5890] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  633.930269][ T5890] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  633.942402][ T1073] usb 1-1: not running at top speed; connect to a high speed hub
[  633.951117][ T5890] usb 6-1: config 220 has no interface number 2
[  633.957527][ T5890] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  633.971898][ T5890] usb 6-1: config 220 interface 0 has no altsetting 0
[  633.979142][ T1073] usb 1-1: config 1 has an invalid interface number: 3 but max is 2
[  633.987682][ T1073] usb 1-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config
[  633.999615][ T5890] usb 6-1: config 220 interface 76 has no altsetting 0
[  634.007736][ T1073] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  634.017704][ T5890] usb 6-1: config 220 interface 1 has no altsetting 0
[  634.028881][ T1073] usb 1-1: config 1 has no interface number 1
[  634.035680][ T1073] usb 1-1: too many endpoints for config 1 interface 3 altsetting 6: 161, using maximum allowed: 30
[  634.047795][ T1073] usb 1-1: config 1 interface 3 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 161
[  634.063842][ T1073] usb 1-1: config 1 interface 3 has no altsetting 0
[  634.071963][ T5890] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  634.081799][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.090339][ T5890] usb 6-1: Product: syz
[  634.095808][ T1073] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  634.107935][ T1073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.116335][ T5890] usb 6-1: Manufacturer: syz
[  634.121100][ T5890] usb 6-1: SerialNumber: syz
[  634.126573][ T1073] usb 1-1: Product: syz
[  634.132344][ T1073] usb 1-1: Manufacturer: syz
[  634.145319][ T1073] usb 1-1: SerialNumber: syz
[  634.345180][T13471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.358328][T13471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.392482][T13471] /dev/rnullb0: Can't open blockdev
[  634.455688][ T5890] usb 6-1: selecting invalid altsetting 0
[  634.478091][ T5890] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  634.507584][ T5890] usb 6-1: No valid video chain found.
[  634.552623][ T5890] usb 6-1: selecting invalid altsetting 0
[  634.573978][ T5890] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  634.606273][ T5890] usb 6-1: USB disconnect, device number 23
[  635.643762][  T982] gspca_sonixj: reg_w1 err -71
[  635.651794][  T982] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  635.706098][  T982] usb 5-1: USB disconnect, device number 102
[  636.642078][ T1073] usb 1-1: 0:2 : does not exist
[  636.692721][ T1073] hub 1-1:1.3: Invalid hub with more than one config or interface
[  636.707239][ T1073] hub 1-1:1.3: probe with driver hub failed with error -22
[  636.717298][T13495] binder: 13494:13495 ioctl 40489426 200000000240 returned -22
[  636.741089][ T1073] usb 1-1: USB disconnect, device number 12
[  637.054915][T13504] /dev/rnullb0: Can't open blockdev
[  637.120940][ T1073] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  637.310846][ T1073] usb 1-1: Using ep0 maxpacket: 16
[  637.330773][ T1073] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  637.360434][ T1073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.391777][ T1073] usb 1-1: config 0 descriptor??
[  637.410145][ T1073] gspca_main: sonixj-2.14.0 probing 0471:0327
[  638.372332][T13517] /dev/rnullb0: Can't open blockdev
[  638.902674][T13527] fuse: Bad value for 'fd'
[  639.180743][ T5956] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  639.341077][ T5956] usb 5-1: Using ep0 maxpacket: 32
[  639.352761][ T5956] usb 5-1: too many configurations: 129, using maximum allowed: 8
[  639.366210][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.409752][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.433601][ T1073] gspca_sonixj: reg_r err -32
[  639.438580][ T1073] sonixj 1-1:0.0: probe with driver sonixj failed with error -32
[  639.461220][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.491693][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.515340][T13531] /dev/rnullb0: Can't open blockdev
[  639.522093][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.522380][T13530] tmpfs: Unknown parameter 'uid<00000000000000016832'
[  639.555006][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.577415][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.599161][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.623754][ T5956] usb 5-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=ce.6f
[  639.650693][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.658825][ T5956] usb 5-1: Product: syz
[  639.668949][ T5956] usb 5-1: Manufacturer: syz
[  639.679070][ T5956] usb 5-1: SerialNumber: syz
[  639.692085][ T5956] usb 5-1: config 0 descriptor??
[  639.704546][ T5956] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  639.903231][ T5956] usb 5-1: qt2_attach - failed to power on unit: -71
[  639.921315][ T5956] quatech2 5-1:0.0: probe with driver quatech2 failed with error -71
[  639.945394][ T5956] usb 5-1: USB disconnect, device number 103
[  640.120735][ T1073] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  640.290750][ T1073] usb 6-1: Using ep0 maxpacket: 16
[  640.303511][ T1073] usb 6-1: config 0 has an invalid interface number: 58 but max is 0
[  640.312214][ T1073] usb 6-1: config 0 has no interface number 0
[  640.318345][ T1073] usb 6-1: config 0 interface 58 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  640.328515][ T1073] usb 6-1: config 0 interface 58 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  640.338497][ T1073] usb 6-1: config 0 interface 58 has no altsetting 0
[  640.354085][ T1073] usb 6-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.03
[  640.363713][ T1073] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.371779][ T1073] usb 6-1: Product: syz
[  640.376042][ T1073] usb 6-1: Manufacturer: syz
[  640.380712][ T1073] usb 6-1: SerialNumber: syz
[  640.391796][ T1073] usb 6-1: config 0 descriptor??
[  640.401779][T13539] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  640.409291][T13539] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  640.421393][ T1073] ums-isd200 6-1:0.58: USB Mass Storage device detected
[  640.508610][  T982] usb 1-1: USB disconnect, device number 13
[  640.676655][ T1073] ums-isd200 6-1:0.58: probe with driver ums-isd200 failed with error -22
[  640.723271][ T5879] usb 6-1: USB disconnect, device number 24
[  641.149302][T13567] /dev/rnullb0: Can't open blockdev
[  641.372548][  T982] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  641.544088][  T982] usb 1-1: Using ep0 maxpacket: 32
[  641.556802][  T982] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  641.569258][T13573] binder: BINDER_SET_CONTEXT_MGR already set
[  641.578874][  T982] usb 1-1: config 0 has no interface number 0
[  641.594696][T13573] binder: 13571:13573 ioctl 4018620d 200000000040 returned -16
[  641.603169][  T982] usb 1-1: config 0 interface 89 has no altsetting 0
[  641.618873][  T982] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  641.638680][  T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.658968][  T982] usb 1-1: Product: syz
[  641.663299][  T982] usb 1-1: Manufacturer: syz
[  641.667906][  T982] usb 1-1: SerialNumber: syz
[  641.693577][  T982] usb 1-1: config 0 descriptor??
[  641.713464][  T982] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  641.733432][  T982] em28xx 1-1:0.89: Video interface 89 found: bulk
[  642.071124][ T5879] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  642.240901][ T5879] usb 6-1: Using ep0 maxpacket: 8
[  642.252710][ T5879] usb 6-1: unable to get BOS descriptor or descriptor too short
[  642.266153][ T5879] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  642.276671][ T5879] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  642.302384][ T5879] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  642.317153][  T982] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  642.332413][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.353097][ T5879] usb 6-1: Product: syz
[  642.364424][ T5879] usb 6-1: Manufacturer: ࠇ
[  642.369068][ T5879] usb 6-1: SerialNumber: syz
[  642.791798][ T5879] cdc_ncm 6-1:1.0: bind() failure
[  642.812616][ T5879] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  642.819923][ T5879] cdc_ncm 6-1:1.1: bind() failure
[  642.845079][ T5879] usb 6-1: USB disconnect, device number 25
[  642.960814][ T5934] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  643.120801][ T5934] usb 5-1: Using ep0 maxpacket: 16
[  643.128257][ T5934] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  643.142373][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.161576][ T5934] usb 5-1: config 0 descriptor??
[  643.188304][  T982] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  643.200543][ T5934] gspca_main: sonixj-2.14.0 probing 0471:0327
[  643.208162][  T982] em28xx 1-1:0.89: board has no eeprom
[  643.280800][  T982] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  643.288857][  T982] em28xx 1-1:0.89: analog set to bulk mode.
[  643.295065][    T9] em28xx 1-1:0.89: Registering V4L2 extension
[  643.311241][  T982] usb 1-1: USB disconnect, device number 14
[  643.329142][  T982] em28xx 1-1:0.89: Disconnecting em28xx
[  643.413542][    T9] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[  643.430711][    T9] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  643.448351][    T9] em28xx 1-1:0.89: No AC97 audio processor
[  643.460287][    T9] usb 1-1: Decoder not found
[  643.467153][    T9] em28xx 1-1:0.89: failed to create media graph
[  643.474281][    T9] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  643.492660][    T9] em28xx 1-1:0.89: Registering snapshot button...
[  643.501961][    T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input83
[  643.515993][    T9] em28xx 1-1:0.89: Remote control support is not available for this card.
[  643.525690][  T982] em28xx 1-1:0.89: Closing input extension
[  643.533635][  T982] em28xx 1-1:0.89: Deregistering snapshot button
[  643.555786][  T982] em28xx 1-1:0.89: Freeing device
[  643.741290][ T5879] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  643.781681][T13592] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  643.788252][T13592] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  643.797333][T13592] vhci_hcd vhci_hcd.0: Device attached
[  643.804419][T13593] vhci_hcd: connection closed
[  643.805924][   T49] vhci_hcd: stop threads
[  643.815183][   T49] vhci_hcd: release socket
[  643.819893][   T49] vhci_hcd: disconnect device
[  643.920971][ T5879] usb 6-1: Using ep0 maxpacket: 16
[  643.939549][ T5879] usb 6-1: unable to get BOS descriptor or descriptor too short
[  643.950137][ T5879] usb 6-1: config 2 has an invalid interface number: 151 but max is 0
[  643.958762][ T5879] usb 6-1: config 2 has no interface number 0
[  643.964994][ T5879] usb 6-1: config 2 interface 151 has no altsetting 0
[  643.973253][ T5879] usb 6-1: string descriptor 0 read error: -22
[  643.979678][ T5879] usb 6-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=40.1f
[  643.990814][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.442212][T13598] /dev/rnullb0: Can't open blockdev
[  644.685162][T13600] PKCS8: Unsupported PKCS#8 version
[  646.101938][ T5934] gspca_sonixj: reg_w err -71
[  646.109826][ T5934] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  646.145264][ T5934] usb 5-1: USB disconnect, device number 104
[  646.513038][ T5879] mos7840 6-1:2.151: required endpoints missing
[  646.538287][ T5879] usb 6-1: USB disconnect, device number 26
[  646.659846][T13617] /dev/rnullb0: Can't open blockdev
[  646.799764][T13626] /dev/rnullb0: Can't open blockdev
[  647.020533][T13636] /dev/rnullb0: Can't open blockdev
[  647.126038][T13643] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  647.127504][T13640] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  647.147005][T13640] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  647.154268][T13640] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  647.172550][   T36] Bluetooth: hci5: Frame reassembly failed (-84)
[  647.230750][ T1073] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  647.360844][ T1073] usb 6-1: device descriptor read/64, error -71
[  647.516633][T13650] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  647.600755][ T1073] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  647.730982][ T1073] usb 6-1: device descriptor read/64, error -71
[  647.800990][ T5897] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  647.841109][ T1073] usb usb6-port1: attempt power cycle
[  647.960769][ T5897] usb 1-1: Using ep0 maxpacket: 16
[  647.969459][ T5897] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  647.983478][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.003852][ T5897] usb 1-1: config 0 descriptor??
[  648.015483][ T5897] gspca_main: sonixj-2.14.0 probing 0471:0327
[  648.190820][ T1073] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  648.216710][ T1073] usb 6-1: device descriptor read/8, error -71
[  648.460957][ T1073] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  648.494470][ T1073] usb 6-1: device descriptor read/8, error -71
[  648.615668][ T1073] usb usb6-port1: unable to enumerate USB device
[  649.170926][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  649.179514][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout
[  649.186344][ T5851] Bluetooth: hci0: command 0x0406 tx timeout
[  649.192803][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout
[  649.530744][ T5934] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  649.700830][ T5934] usb 5-1: Using ep0 maxpacket: 16
[  649.713505][ T5934] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  649.724657][ T5934] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  649.734968][ T5934] usb 5-1: config 0 interface 0 has no altsetting 0
[  649.742200][ T5934] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  649.751645][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.770862][ T5934] usb 5-1: config 0 descriptor??
[  650.007825][T13659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.031590][T13659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.057280][T13661] /dev/rnullb0: Can't open blockdev
[  650.169083][T13665] program syz.5.2304 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  650.290952][ T5934] hid (null): unknown global tag 0xc
[  650.296334][ T5934] hid (null): unknown global tag 0xd
[  650.317260][ T5934] hid_parser_main: 201 callbacks suppressed
[  650.317280][ T5934] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  650.345983][ T5934] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  650.353679][ T5934] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  650.361041][ T5934] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  650.368579][ T5934] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  650.385271][ T5934] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  650.395477][ T5934] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  650.404988][ T5934] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  650.412544][ T5934] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  650.425348][ T5934] cougar 0003:060B:500A.001E: unknown main item tag 0x0
[  650.440578][ T5934] cougar 0003:060B:500A.001E: unexpected long global item
[  650.449205][ T5934] cougar 0003:060B:500A.001E: parse failed
[  650.456156][ T5934] cougar 0003:060B:500A.001E: probe with driver cougar failed with error -22
[  650.478643][T13659] /dev/rnullb0: Can't open blockdev
[  650.508939][ T5934] usb 5-1: USB disconnect, device number 105
[  650.650052][ T5897] gspca_sonixj: reg_w1 err -71
[  650.655475][ T5897] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  650.681801][ T5897] usb 1-1: USB disconnect, device number 15
[  650.914338][T13676] /dev/rnullb0: Can't open blockdev
[  651.159315][T13685] binder: 13679:13685 ioctl c0306201 200000000080 returned -14
[  651.190311][T13685] binder: 13679:13685 ioctl c0306201 2000000003c0 returned -14
[  651.211720][T13685] binder: 13679:13685 ioctl c0306201 2000000001c0 returned -14
[  651.370903][ T5897] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  651.540894][ T5897] usb 6-1: Using ep0 maxpacket: 16
[  651.550567][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  651.576117][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  651.600863][ T5897] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  651.630720][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.653536][ T5897] usb 6-1: config 0 descriptor??
[  652.100889][    T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  652.272334][    T9] usb 5-1: Using ep0 maxpacket: 32
[  652.277924][ T5897] usbhid 6-1:0.0: can't add hid device: -32
[  652.284242][ T5897] usbhid 6-1:0.0: probe with driver usbhid failed with error -32
[  652.297603][    T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 0
[  652.326590][    T9] usb 5-1: config 0 has no interface number 0
[  652.340751][    T9] usb 5-1: config 0 interface 125 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  652.369576][    T9] usb 5-1: config 0 interface 125 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  652.372808][T13704] vivid-000: disconnect
[  652.391861][ T5897] usb 6-1: USB disconnect, device number 31
[  652.396148][    T9] usb 5-1: config 0 interface 125 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  652.438371][    T9] usb 5-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=2e.0f
[  652.460715][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.479148][    T9] usb 5-1: Product: syz
[  652.489309][    T9] usb 5-1: Manufacturer: syz
[  652.499485][    T9] usb 5-1: SerialNumber: syz
[  652.515314][    T9] usb 5-1: config 0 descriptor??
[  652.531864][T13702] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  652.552801][    T9] usb 5-1: Found UVC 0.00 device syz (3277:009e)
[  652.559687][    T9] usb 5-1: No valid video chain found.
[  653.135574][  T982] libceph: connect (1)[c::]:6789 error -101
[  653.149268][  T982] libceph: mon0 (1)[c::]:6789 connect error
[  653.435114][  T982] libceph: connect (1)[c::]:6789 error -101
[  653.441475][  T982] libceph: mon0 (1)[c::]:6789 connect error
[  653.834269][T13708] ceph: No mds server is up or the cluster is laggy
[  654.071883][T13699] vivid-000: reconnect
[  654.100918][T13711] /dev/rnullb0: Can't open blockdev
[  655.159890][ T5890] usb 5-1: USB disconnect, device number 106
[  655.260821][ T5897] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  655.403634][  T982] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  655.410723][ T5897] usb 6-1: Using ep0 maxpacket: 16
[  655.422415][ T5897] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  655.432049][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.451708][ T5897] usb 6-1: config 0 descriptor??
[  655.465514][ T5897] gspca_main: sonixj-2.14.0 probing 0471:0327
[  655.692298][  T982] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  655.734050][  T982] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  655.748844][  T982] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  655.748873][  T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.973349][  T982] usb 1-1: usb_control_msg returned -32
[  655.979271][  T982] usbtmc 1-1:16.0: can't read capabilities
[  656.051517][    T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  656.079495][T13714] netlink: 796 bytes leftover after parsing attributes in process `syz.5.2321'.
[  656.240722][    T9] usb 5-1: Using ep0 maxpacket: 8
[  656.248212][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  656.257902][    T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  656.270151][    T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  656.294173][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  656.303617][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.311906][    T9] usb 5-1: Product: syz
[  656.316094][    T9] usb 5-1: Manufacturer: ࠇ
[  656.321356][    T9] usb 5-1: SerialNumber: syz
[  656.342477][T13732] binder: BINDER_SET_CONTEXT_MGR already set
[  656.348500][T13732] binder: 13718:13732 ioctl 4018620d 200000000040 returned -16
[  656.370855][T13732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  656.379810][T13732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  656.454721][   T30] audit: type=1326 audit(1753876097.550:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13713 comm="syz.5.2321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff42398e9a9 code=0x0
[  656.553888][ T5897] gspca_sonixj: reg_r err -71
[  656.571504][ T5897] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  656.582261][    T9] cdc_ncm 5-1:1.0: bind() failure
[  656.586946][ T5897] usb 6-1: USB disconnect, device number 32
[  656.615567][    T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  656.624164][    T9] cdc_ncm 5-1:1.1: bind() failure
[  656.640311][    T9] usb 5-1: USB disconnect, device number 107
[  657.788370][T13743] /dev/rnullb0: Can't open blockdev
[  657.893723][   T30] audit: type=1326 audit(1753876098.990:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.5.2333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff42398e9a9 code=0x0
[  657.997426][ T5851] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff
[  658.185571][  T982] usb 1-1: USB disconnect, device number 16
[  658.315601][T13750] /dev/rnullb0: Can't open blockdev
[  659.091201][ T5890] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  659.270698][ T5890] usb 6-1: Using ep0 maxpacket: 8
[  659.282968][ T5890] usb 6-1: unable to get BOS descriptor or descriptor too short
[  659.293045][ T5890] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  659.304359][ T5890] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  659.334332][ T5890] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  659.350738][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.372434][ T5890] usb 6-1: Product: syz
[  659.376643][ T5890] usb 6-1: Manufacturer: ࠇ
[  659.393138][ T5890] usb 6-1: SerialNumber: syz
[  659.645943][ T5890] cdc_ncm 6-1:1.0: bind() failure
[  659.667321][ T5890] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  659.685119][ T5890] cdc_ncm 6-1:1.1: bind() failure
[  659.707360][ T5890] usb 6-1: USB disconnect, device number 33
[  659.735218][T13764] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  659.764910][T13765] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  660.615325][  T982] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  660.707731][T13774] /dev/rnullb0: Can't open blockdev
[  660.726995][T13774] /dev/rnullb0: Can't open blockdev
[  660.741617][T13774] /dev/rnullb0: Can't open blockdev
[  660.752467][T13774] /dev/rnullb0: Can't open blockdev
[  660.768904][T13774] /dev/rnullb0: Can't open blockdev
[  660.779069][T13774] /dev/rnullb0: Can't open blockdev
[  660.790989][  T982] usb 6-1: Using ep0 maxpacket: 16
[  660.791707][T13774] /dev/rnullb0: Can't open blockdev
[  660.815728][  T982] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  660.821506][T13774] /dev/rnullb0: Can't open blockdev
[  660.830658][  T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.831849][T13774] /dev/rnullb0: Can't open blockdev
[  660.857668][T13774] /dev/rnullb0: Can't open blockdev
[  660.861611][  T982] usb 6-1: config 0 descriptor??
[  660.872249][T13774] /dev/rnullb0: Can't open blockdev
[  660.888816][T13774] /dev/rnullb0: Can't open blockdev
[  660.894216][  T982] gspca_main: sonixj-2.14.0 probing 0471:0327
[  660.899614][T13774] /dev/rnullb0: Can't open blockdev
[  660.906061][ T5897] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  660.921418][T13774] /dev/rnullb0: Can't open blockdev
[  660.941517][T13774] /dev/rnullb0: Can't open blockdev
[  660.958086][T13774] /dev/rnullb0: Can't open blockdev
[  660.968464][T13774] /dev/rnullb0: Can't open blockdev
[  660.988488][T13774] /dev/rnullb0: Can't open blockdev
[  660.998894][T13774] /dev/rnullb0: Can't open blockdev
[  661.015607][T13774] /dev/rnullb0: Can't open blockdev
[  661.031814][T13774] /dev/rnullb0: Can't open blockdev
[  661.052007][T13774] /dev/rnullb0: Can't open blockdev
[  661.059906][T13774] /dev/rnullb0: Can't open blockdev
[  661.077076][T13774] /dev/rnullb0: Can't open blockdev
[  661.091088][ T5897] usb 1-1: Using ep0 maxpacket: 32
[  661.101548][ T5897] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  661.123049][T13774] /dev/rnullb0: Can't open blockdev
[  661.129239][T13774] /dev/rnullb0: Can't open blockdev
[  661.135017][ T5897] usb 1-1: config 0 has no interface number 0
[  661.152393][T13774] /dev/rnullb0: Can't open blockdev
[  661.157883][ T5897] usb 1-1: config 0 interface 89 has no altsetting 0
[  661.169006][T13774] /dev/rnullb0: Can't open blockdev
[  661.182046][T13774] /dev/rnullb0: Can't open blockdev
[  661.182918][ T5897] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  661.198955][T13774] /dev/rnullb0: Can't open blockdev
[  661.207283][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.225101][ T5897] usb 1-1: Product: syz
[  661.232291][T13774] /dev/rnullb0: Can't open blockdev
[  661.235282][ T5897] usb 1-1: Manufacturer: syz
[  661.238431][T13774] /dev/rnullb0: Can't open blockdev
[  661.250804][ T5897] usb 1-1: SerialNumber: syz
[  661.261426][T13774] /dev/rnullb0: Can't open blockdev
[  661.268487][T13774] /dev/rnullb0: Can't open blockdev
[  661.280691][ T5897] usb 1-1: config 0 descriptor??
[  661.288385][T13774] /dev/rnullb0: Can't open blockdev
[  661.302226][ T5897] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  661.321609][T13774] /dev/rnullb0: Can't open blockdev
[  661.331075][ T5897] em28xx 1-1:0.89: Video interface 89 found: bulk
[  661.341814][T13774] /dev/rnullb0: Can't open blockdev
[  661.358998][T13774] /dev/rnullb0: Can't open blockdev
[  661.375856][T13774] /dev/rnullb0: Can't open blockdev
[  661.396101][T13774] /dev/rnullb0: Can't open blockdev
[  661.413168][T13774] /dev/rnullb0: Can't open blockdev
[  661.429490][T13774] /dev/rnullb0: Can't open blockdev
[  661.445935][T13774] /dev/rnullb0: Can't open blockdev
[  661.466050][T13774] /dev/rnullb0: Can't open blockdev
[  661.481683][T13774] /dev/rnullb0: Can't open blockdev
[  661.504564][T13774] /dev/rnullb0: Can't open blockdev
[  661.511692][T13774] /dev/rnullb0: Can't open blockdev
[  661.518232][T13774] /dev/rnullb0: Can't open blockdev
[  661.915007][ T5897] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  662.534222][    T9] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  662.705795][    T9] usb 5-1: Using ep0 maxpacket: 8
[  662.715639][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  662.730955][    T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  662.744931][    T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  662.758044][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  662.772006][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.790768][    T9] usb 5-1: Product: syz
[  662.795309][    T9] usb 5-1: Manufacturer: ࠇ
[  662.800058][    T9] usb 5-1: SerialNumber: syz
[  662.942589][ T5897] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  662.953264][ T5897] em28xx 1-1:0.89: board has no eeprom
[  663.011047][ T5897] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  663.018302][ T5897] em28xx 1-1:0.89: analog set to bulk mode.
[  663.036927][    T9] cdc_ncm 5-1:1.0: bind() failure
[  663.051627][ T5890] em28xx 1-1:0.89: Registering V4L2 extension
[  663.053152][    T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  663.064143][ T5897] usb 1-1: USB disconnect, device number 17
[  663.081976][ T5897] em28xx 1-1:0.89: Disconnecting em28xx
[  663.089947][    T9] cdc_ncm 5-1:1.1: bind() failure
[  663.131269][    T9] usb 5-1: USB disconnect, device number 108
[  663.166519][ T5890] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[  663.176857][ T5890] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  663.198962][ T5890] em28xx 1-1:0.89: No AC97 audio processor
[  663.221062][ T5890] usb 1-1: Decoder not found
[  663.226139][ T5890] em28xx 1-1:0.89: failed to create media graph
[  663.233247][ T5890] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  663.251293][ T5890] em28xx 1-1:0.89: Registering snapshot button...
[  663.260546][ T5890] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input85
[  663.281429][ T5890] em28xx 1-1:0.89: Remote control support is not available for this card.
[  663.291502][ T5897] em28xx 1-1:0.89: Closing input extension
[  663.297479][ T5897] em28xx 1-1:0.89: Deregistering snapshot button
[  663.332131][ T5897] em28xx 1-1:0.89: Freeing device
[  663.556364][  T982] gspca_sonixj: reg_w1 err -71
[  663.570875][  T982] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  663.603387][  T982] usb 6-1: USB disconnect, device number 34
[  663.677676][T13797] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2350'.
[  663.709002][T13797] /dev/rnullb0: Can't open blockdev
[  664.470805][  T982] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  664.612946][T13819] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2359'.
[  664.647390][T13819] 8021q: VLANs not supported on wg2
[  664.670779][  T982] usb 5-1: Using ep0 maxpacket: 32
[  664.691181][  T982] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  664.699396][  T982] usb 5-1: config 0 has no interface number 0
[  664.730704][  T982] usb 5-1: config 0 interface 89 has no altsetting 0
[  664.740052][  T982] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  664.770809][  T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.778926][  T982] usb 5-1: Product: syz
[  664.790955][  T982] usb 5-1: Manufacturer: syz
[  664.795635][  T982] usb 5-1: SerialNumber: syz
[  664.823658][  T982] usb 5-1: config 0 descriptor??
[  664.843143][  T982] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  664.870709][  T982] em28xx 5-1:0.89: Video interface 89 found: bulk
[  665.231545][T13820] /dev/rnullb0: Can't open blockdev
[  665.327927][T13830] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma?
[  665.377441][T13830] /dev/rnullb0: Can't open blockdev
[  665.439482][  T982] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  665.930916][ T5897] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  666.090715][ T5897] usb 1-1: Using ep0 maxpacket: 16
[  666.108911][ T5897] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  666.132011][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.170526][ T5897] usb 1-1: config 0 descriptor??
[  666.179114][ T5897] gspca_main: sonixj-2.14.0 probing 0471:0327
[  666.251869][T13812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  666.262957][T13812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  666.350433][T13837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  666.372587][T13837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  666.407123][T13837] kvm_intel: kvm [13835]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1
[  666.417267][T13838] kvm_intel: kvm [13835]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1
[  666.489499][  T982] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  666.500309][  T982] em28xx 5-1:0.89: board has no eeprom
[  666.570966][  T982] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  666.580783][ T5890] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  666.720763][ T5890] usb 6-1: device descriptor read/64, error -71
[  666.954979][  T982] em28xx 5-1:0.89: analog set to bulk mode.
[  666.961436][    T9] em28xx 5-1:0.89: Registering V4L2 extension
[  666.972266][ T5890] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  666.984946][  T982] usb 5-1: USB disconnect, device number 109
[  667.150848][ T5890] usb 6-1: device descriptor read/64, error -71
[  667.182823][    T9] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-19)
[  667.193746][  T982] em28xx 5-1:0.89: Disconnecting em28xx
[  667.201688][    T9] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  667.210473][    T9] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  667.224592][    T9] em28xx 5-1:0.89: No AC97 audio processor
[  667.237950][    T9] usb 5-1: Decoder not found
[  667.258228][    T9] em28xx 5-1:0.89: failed to create media graph
[  667.261225][ T5890] usb usb6-port1: attempt power cycle
[  667.274196][    T9] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  667.294367][    T9] em28xx 5-1:0.89: Registering snapshot button...
[  667.317372][    T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input86
[  667.360260][    T9] em28xx 5-1:0.89: Remote control support is not available for this card.
[  667.393044][  T982] em28xx 5-1:0.89: Closing input extension
[  667.411538][  T982] em28xx 5-1:0.89: Deregistering snapshot button
[  667.457481][  T982] em28xx 5-1:0.89: Freeing device
[  667.480982][T13845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.498578][T13845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.650803][ T5890] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  667.671532][ T5890] usb 6-1: device descriptor read/8, error -71
[  667.820917][  T982] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  667.910961][ T5890] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  667.943644][ T5890] usb 6-1: device descriptor read/8, error -71
[  667.970705][  T982] usb 5-1: Using ep0 maxpacket: 16
[  667.982857][  T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  667.994206][  T982] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  668.004883][  T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.021360][  T982] usb 5-1: config 0 descriptor??
[  668.061192][ T5890] usb usb6-port1: unable to enumerate USB device
[  668.452328][  T982] hid_parser_main: 452 callbacks suppressed
[  668.452351][  T982] creative-sb0540 0003:041E:3100.001F: unknown main item tag 0x0
[  668.471006][  T982] creative-sb0540 0003:041E:3100.001F: unknown main item tag 0x0
[  668.478886][  T982] creative-sb0540 0003:041E:3100.001F: unknown main item tag 0x0
[  668.486756][  T982] creative-sb0540 0003:041E:3100.001F: unknown main item tag 0x0
[  668.494813][  T982] creative-sb0540 0003:041E:3100.001F: unknown main item tag 0x0
[  668.502731][  T982] creative-sb0540 0003:041E:3100.001F: unknown main item tag 0x0
[  668.511811][  T982] creative-sb0540 0003:041E:3100.001F: unknown main item tag 0x0
[  668.521703][  T982] creative-sb0540 0003:041E:3100.001F: unknown main item tag 0x0
[  668.529578][  T982] creative-sb0540 0003:041E:3100.001F: unknown main item tag 0x0
[  668.537479][  T982] creative-sb0540 0003:041E:3100.001F: unknown main item tag 0x0
[  668.547568][  T982] creative-sb0540 0003:041E:3100.001F: unexpected long global item
[  668.556361][  T982] creative-sb0540 0003:041E:3100.001F: parse failed
[  668.563380][  T982] creative-sb0540 0003:041E:3100.001F: probe with driver creative-sb0540 failed with error -22
[  668.916164][ T5897] gspca_sonixj: reg_w1 err -71
[  668.931181][ T5897] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  668.957800][ T5897] usb 1-1: USB disconnect, device number 18
[  668.978134][ T5890] usb 5-1: USB disconnect, device number 110
[  669.341865][ T5890] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  669.501020][ T5890] usb 5-1: Using ep0 maxpacket: 16
[  669.522976][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  669.540939][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  669.560698][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  669.579585][ T5890] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  669.592777][ T5890] usb 5-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0
[  669.610153][ T5890] usb 5-1: Manufacturer: syz
[  669.621478][ T5890] usb 5-1: config 0 descriptor??
[  669.730787][ T5897] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  669.783776][T13858] /dev/rnullb0: Can't open blockdev
[  669.902357][ T5897] usb 1-1: not running at top speed; connect to a high speed hub
[  669.912401][ T5897] usb 1-1: config 5 has an invalid interface number: 148 but max is 0
[  669.920919][ T5897] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  669.931673][ T5897] usb 1-1: config 5 has no interface number 0
[  669.937929][ T5897] usb 1-1: config 5 interface 148 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0
[  669.951154][T13863] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000
[  669.963631][ T5897] usb 1-1: config 5 interface 148 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  669.988591][T13863] /dev/rnullb0: Can't open blockdev
[  669.995177][ T5897] usb 1-1: config 5 interface 148 has no altsetting 0
[  670.005402][ T5897] usb 1-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2
[  670.015356][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.023804][ T5897] usb 1-1: Product: syz
[  670.028323][ T5897] usb 1-1: Manufacturer: syz
[  670.035951][ T5897] usb 1-1: SerialNumber: syz
[  670.062625][ T5890] ryos 0003:1E7D:3138.0020: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  670.260358][ T5890] usb 5-1: USB disconnect, device number 111
[  670.269118][T13852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  670.278313][T13852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  670.304333][T13852] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  670.311400][T13852] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  670.333869][T13852] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  670.345657][T13852] comedi comedi3: 8255: I/O port conflict (0xffffffffdc952399,4)
[  670.355574][T13852] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  670.388836][T13852] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  670.408658][T13852] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  670.640273][ T5897] ipheth 1-1:5.148: Unable to find endpoints
[  670.671730][ T5897] usb 1-1: USB disconnect, device number 19
[  670.927796][T13873] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2378'.
[  671.800752][ T5934] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  671.941938][ T5934] usb 6-1: device descriptor read/64, error -71
[  672.190790][ T5934] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  672.330732][ T5934] usb 6-1: device descriptor read/64, error -71
[  672.458086][ T5934] usb usb6-port1: attempt power cycle
[  672.470726][  T982] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  672.626303][T13903] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2387'.
[  672.630761][  T982] usb 1-1: Using ep0 maxpacket: 8
[  672.635929][T13903] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2387'.
[  672.652941][  T982] usb 1-1: unable to get BOS descriptor or descriptor too short
[  672.662522][  T982] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  672.680748][  T982] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  672.703098][  T982] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  672.713774][  T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.730748][  T982] usb 1-1: Product: syz
[  672.741420][  T982] usb 1-1: Manufacturer: ࠇ
[  672.750719][  T982] usb 1-1: SerialNumber: syz
[  672.800764][ T5934] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  672.821605][ T5934] usb 6-1: device descriptor read/8, error -71
[  673.061763][ T5934] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  673.102405][ T5934] usb 6-1: device descriptor read/8, error -71
[  673.147046][  T982] cdc_ncm 1-1:1.0: bind() failure
[  673.174271][  T982] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  673.190743][  T982] cdc_ncm 1-1:1.1: bind() failure
[  673.211589][ T5934] usb usb6-port1: unable to enumerate USB device
[  673.221498][  T982] usb 1-1: USB disconnect, device number 20
[  674.180698][ T5890] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  674.342739][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  674.370742][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  674.390904][ T5890] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  674.400075][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.433437][ T5890] usb 1-1: config 0 descriptor??
[  674.846675][ T5890] hid_parser_main: 203 callbacks suppressed
[  674.846697][ T5890] isku 0003:1E7D:319C.0021: unknown main item tag 0x0
[  674.874072][ T5890] isku 0003:1E7D:319C.0021: unknown main item tag 0x0
[  674.891045][ T5890] isku 0003:1E7D:319C.0021: unknown main item tag 0x0
[  674.898077][ T5890] isku 0003:1E7D:319C.0021: unknown main item tag 0x0
[  674.908379][ T5890] isku 0003:1E7D:319C.0021: unknown main item tag 0x0
[  674.930711][ T5890] isku 0003:1E7D:319C.0021: unknown main item tag 0x0
[  674.937638][ T5890] isku 0003:1E7D:319C.0021: unknown main item tag 0x0
[  674.940853][ T5934] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  674.957783][ T5890] isku 0003:1E7D:319C.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0
[  675.050537][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  675.096533][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  675.120892][ T5934] usb 5-1: Using ep0 maxpacket: 16
[  675.147420][ T5890] isku 0003:1E7D:319C.0021: couldn't init struct isku_device
[  675.158207][ T5934] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  675.180720][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.221479][ T5934] usb 5-1: config 0 descriptor??
[  675.326454][ T5934] gspca_main: sonixj-2.14.0 probing 0471:0327
[  675.499513][ T5890] isku 0003:1E7D:319C.0021: couldn't install keyboard
[  675.516550][ T5890] isku 0003:1E7D:319C.0021: probe with driver isku failed with error -71
[  675.529303][ T5890] usb 1-1: USB disconnect, device number 21
[  675.736753][ T5934] gspca_sonixj: reg_r err -32
[  675.746926][ T5934] sonixj 5-1:0.0: probe with driver sonixj failed with error -32
[  675.991937][ T5890] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  676.132909][ T5890] usb 1-1: device descriptor read/64, error -71
[  676.390860][ T5890] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  676.531214][ T1073] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  676.540780][ T5890] usb 1-1: device descriptor read/64, error -71
[  676.660969][ T5890] usb usb1-port1: attempt power cycle
[  676.690936][ T1073] usb 6-1: Using ep0 maxpacket: 8
[  676.702783][ T1073] usb 6-1: unable to get BOS descriptor or descriptor too short
[  676.712823][ T1073] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  676.723181][ T1073] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  676.736276][ T1073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  676.745743][ T1073] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.754174][ T1073] usb 6-1: Product: syz
[  676.758378][ T1073] usb 6-1: Manufacturer: ࠇ
[  676.766283][ T1073] usb 6-1: SerialNumber: syz
[  677.011007][ T5890] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  677.053229][ T5890] usb 1-1: device descriptor read/8, error -71
[  677.118069][ T1073] cdc_ncm 6-1:1.0: bind() failure
[  677.138539][ T1073] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  677.150449][ T1073] cdc_ncm 6-1:1.1: bind() failure
[  677.171388][ T1073] usb 6-1: USB disconnect, device number 43
[  677.300827][ T5890] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  677.321708][ T5890] usb 1-1: device descriptor read/8, error -71
[  677.431270][ T5890] usb usb1-port1: unable to enumerate USB device
[  678.297731][T13964] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  678.312395][T13964] Error validating options; rc = [-22]
[  678.567342][   T30] audit: type=1326 audit(1753876119.660:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13971 comm="syz.5.2407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff42398e9a9 code=0x0
[  678.633219][ T5934] usb 5-1: USB disconnect, device number 112
[  678.699293][T13975] /dev/rnullb0: Can't open blockdev
[  679.030911][ T5890] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  679.203423][ T5890] usb 1-1: Using ep0 maxpacket: 8
[  679.227128][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short
[  679.244944][ T5890] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  679.266164][ T5890] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  679.279234][ T5890] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  679.298905][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.308124][ T5890] usb 1-1: Product: syz
[  679.321027][ T5890] usb 1-1: Manufacturer: ࠇ
[  679.325739][ T5890] usb 1-1: SerialNumber: syz
[  679.774194][ T5890] cdc_ncm 1-1:1.0: bind() failure
[  679.801568][ T5890] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  679.818784][ T5890] cdc_ncm 1-1:1.1: bind() failure
[  679.841091][ T5890] usb 1-1: USB disconnect, device number 26
[  679.881191][ T5897] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  680.040899][ T5897] usb 6-1: Using ep0 maxpacket: 32
[  680.050274][ T5897] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  680.060765][ T5897] usb 6-1: config 0 has no interface number 0
[  680.080567][ T5897] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  680.100717][ T5897] usb 6-1: config 0 interface 85 has no altsetting 0
[  680.116086][ T5897] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  680.135184][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.143718][ T5897] usb 6-1: Product: syz
[  680.148025][ T5897] usb 6-1: Manufacturer: syz
[  680.153172][ T5897] usb 6-1: SerialNumber: syz
[  680.169183][ T5897] usb 6-1: config 0 descriptor??
[  680.620897][ T5956] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  680.760771][ T5956] usb 1-1: device descriptor read/64, error -71
[  680.779228][ T5897] appletouch 6-1:0.85: Geyser mode initialized.
[  680.796016][ T5897] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input87
[  680.992598][ T5897] usb 6-1: USB disconnect, device number 44
[  681.010797][ T5956] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  681.050070][ T5897] appletouch 6-1:0.85: input: appletouch disconnected
[  681.128499][T14002] /dev/rnullb0: Can't open blockdev
[  681.150787][ T5956] usb 1-1: device descriptor read/64, error -71
[  681.263852][ T5956] usb usb1-port1: attempt power cycle
[  681.339345][T14007] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2422'.
[  681.630906][ T5956] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  681.671327][ T5956] usb 1-1: device descriptor read/8, error -71
[  681.705898][T14017] /dev/rnullb0: Can't open blockdev
[  681.920827][ T5956] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  681.951419][ T5956] usb 1-1: device descriptor read/8, error -71
[  682.061149][ T1073] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  682.074901][ T5956] usb usb1-port1: unable to enumerate USB device
[  682.230844][ T1073] usb 6-1: Using ep0 maxpacket: 8
[  682.241819][ T1073] usb 6-1: unable to get BOS descriptor or descriptor too short
[  682.256685][ T1073] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  682.272950][ T1073] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  682.295617][ T1073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  682.311524][ T1073] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.327972][ T1073] usb 6-1: Product: syz
[  682.338331][ T1073] usb 6-1: Manufacturer: ࠇ
[  682.350909][ T1073] usb 6-1: SerialNumber: syz
[  682.595882][ T1073] cdc_ncm 6-1:1.0: bind() failure
[  682.606043][ T1073] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  682.613449][ T1073] cdc_ncm 6-1:1.1: bind() failure
[  682.638765][ T1073] usb 6-1: USB disconnect, device number 45
[  682.874909][T14025] openvswitch: netlink: IPv6 tunnel dst address is zero
[  683.172388][T14034] /dev/rnullb0: Can't open blockdev
[  683.420901][ T5879] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  683.600690][ T5879] usb 5-1: Using ep0 maxpacket: 32
[  683.614717][ T5879] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  683.628002][ T5879] usb 5-1: config 0 has no interface number 0
[  683.645854][ T5879] usb 5-1: config 0 interface 89 has no altsetting 0
[  683.665408][ T5879] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  683.676804][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.690428][ T5879] usb 5-1: Product: syz
[  683.701327][ T5879] usb 5-1: Manufacturer: syz
[  683.706296][ T5879] usb 5-1: SerialNumber: syz
[  683.734551][ T5879] usb 5-1: config 0 descriptor??
[  683.745193][ T5879] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  683.763662][ T5879] em28xx 5-1:0.89: Video interface 89 found: bulk
[  684.203390][T14048] deleting an unspecified loop device is not supported.
[  684.354462][ T5879] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  684.828682][T14053] syzkaller1: entered promiscuous mode
[  684.839219][T14053] syzkaller1: entered allmulticast mode
[  685.378132][ T5879] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  685.390902][ T5934] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  685.405171][ T5879] em28xx 5-1:0.89: board has no eeprom
[  685.470698][ T5879] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  685.484898][ T5879] em28xx 5-1:0.89: analog set to bulk mode.
[  685.498224][  T982] em28xx 5-1:0.89: Registering V4L2 extension
[  685.516962][ T5879] usb 5-1: USB disconnect, device number 113
[  685.534706][ T5879] em28xx 5-1:0.89: Disconnecting em28xx
[  685.563151][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  685.589941][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  685.628047][ T5934] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  685.637721][  T982] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  685.647597][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.656415][  T982] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  685.675502][ T5934] usb 6-1: Product: syz
[  685.679816][  T982] em28xx 5-1:0.89: No AC97 audio processor
[  685.689971][ T5934] usb 6-1: Manufacturer: syz
[  685.700392][  T982] usb 5-1: Decoder not found
[  685.705867][ T5934] usb 6-1: SerialNumber: syz
[  685.711134][  T982] em28xx 5-1:0.89: failed to create media graph
[  685.722088][ T5934] usb 6-1: config 0 descriptor??
[  685.728408][  T982] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  685.746538][  T982] em28xx 5-1:0.89: Registering snapshot button...
[  685.763398][  T982] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input88
[  685.788711][  T982] em28xx 5-1:0.89: Remote control support is not available for this card.
[  685.844866][ T5879] em28xx 5-1:0.89: Closing input extension
[  685.863132][ T5879] em28xx 5-1:0.89: Deregistering snapshot button
[  685.902428][ T5879] em28xx 5-1:0.89: Freeing device
[  685.984716][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  685.992854][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  686.003353][ T5934] powermate: unknown product id 0240
[  686.026822][ T5934] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input89
[  686.082757][    C0] powermate: config urb returned -71
[  686.089174][    C0] powermate: config urb returned -71
[  686.089608][    C0] powermate: config urb returned -71
[  686.089792][    C0] powermate: config urb returned -71
[  686.118059][    C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  686.131486][ T5934] usb 6-1: USB disconnect, device number 46
[  686.430843][ T5879] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  686.510742][ T5956] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  686.590938][ T5879] usb 5-1: Using ep0 maxpacket: 8
[  686.602880][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short
[  686.622521][ T5879] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  686.638679][ T5879] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  686.661076][ T5879] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  686.675544][ T5956] usb 1-1: Using ep0 maxpacket: 16
[  686.680898][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.680925][ T5879] usb 5-1: Product: syz
[  686.680938][ T5879] usb 5-1: Manufacturer: ࠇ
[  686.680960][ T5879] usb 5-1: SerialNumber: syz
[  686.754594][ T5956] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  686.764247][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.789145][ T5956] usb 1-1: config 0 descriptor??
[  686.807451][ T5956] gspca_main: sonixj-2.14.0 probing 0471:0327
[  686.923618][ T5879] cdc_ncm 5-1:1.0: bind() failure
[  686.950259][ T5879] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  686.968081][ T5879] cdc_ncm 5-1:1.1: bind() failure
[  687.001831][ T5879] usb 5-1: USB disconnect, device number 114
[  687.650461][T13657] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  687.850096][T14080] /dev/rnullb0: Can't open blockdev
[  687.891001][   T31] INFO: task syz.3.1866:12202 blocked for more than 143 seconds.
[  687.899111][   T31]       Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
[  687.919424][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.928565][   T31] task:syz.3.1866      state:D stack:26920 pid:12202 tgid:12202 ppid:5845   task_flags:0x400040 flags:0x00004004
[  687.940679][   T31] Call Trace:
[  687.944275][   T31]  <TASK>
[  687.947330][   T31]  __schedule+0x1737/0x4d30
[  687.952202][   T31]  ? __lock_acquire+0xab9/0xd20
[  687.957165][   T31]  ? schedule+0x165/0x360
[  687.961877][   T31]  ? __lock_acquire+0xab9/0xd20
[  687.966959][   T31]  ? __pfx___schedule+0x10/0x10
[  687.973686][   T31]  ? schedule+0x91/0x360
[  687.978068][   T31]  schedule+0x165/0x360
[  687.982756][   T31]  schedule_preempt_disabled+0x13/0x30
[  687.988524][   T31]  rwsem_down_write_slowpath+0xbec/0x1030
[  687.995341][   T31]  ? rwsem_down_write_slowpath+0x7ec/0x1030
[  688.001569][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  688.007833][   T31]  ? __lock_acquire+0xab9/0xd20
[  688.013116][   T31]  ? userfaultfd_release_all+0x15a/0x5e0
[  688.018958][   T31]  down_write+0x1ab/0x1f0
[  688.023610][   T31]  ? __pfx_down_write+0x10/0x10
[  688.029000][   T31]  ? locks_remove_file+0x344/0xea0
[  688.034475][   T31]  userfaultfd_release_all+0x15a/0x5e0
[  688.040063][   T31]  ? ima_file_free+0x150/0x460
[  688.046283][   T31]  ? __pfx_userfaultfd_release_all+0x10/0x10
[  688.056568][   T31]  userfaultfd_release+0xe7/0x1b0
[  688.064282][   T31]  ? __pfx_userfaultfd_release+0x10/0x10
[  688.075996][   T31]  ? evm_file_release+0x108/0x1e0
[  688.081895][   T31]  ? __pfx_userfaultfd_release+0x10/0x10
[  688.088005][   T31]  __fput+0x449/0xa70
[  688.093160][   T31]  task_work_run+0x1d4/0x260
[  688.098265][   T31]  ? __pfx_task_work_run+0x10/0x10
[  688.104041][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  688.109729][   T31]  exit_to_user_mode_loop+0xec/0x110
[  688.115705][   T31]  do_syscall_64+0x2bd/0x3b0
[  688.120886][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.127159][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  688.140276][   T31]  ? clear_bhb_loop+0x60/0xb0
[  688.157078][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.163599][   T31] RIP: 0033:0x7f1f55f8e9a9
[  688.168198][   T31] RSP: 002b:00007ffceeca80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  688.183134][   T31] RAX: 0000000000000000 RBX: 00007f1f561b7ba0 RCX: 00007f1f55f8e9a9
[  688.194014][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  688.204042][   T31] RBP: 00007f1f561b7ba0 R08: 000000000000029c R09: 0000001eeeca83df
[  688.215098][   T31] R10: 00007f1f561b7ac0 R11: 0000000000000246 R12: 0000000000080e35
[  688.225074][   T31] R13: 00007ffceeca81e0 R14: ffffffffffffffff R15: 00007ffceeca8200
[  688.235635][   T31]  </TASK>
[  688.238953][   T31] 
[  688.238953][   T31] Showing all locks held in the system:
[  688.249445][   T31] 1 lock held by khungtaskd/31:
[  688.258440][   T31]  #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  688.274855][   T31] 2 locks held by getty/5607:
[  688.283377][   T31]  #0: ffff88814d8e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  688.297429][   T31]  #1: ffffc900036ce2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  688.309380][   T31] 5 locks held by kworker/1:7/5956:
[  688.318293][   T31]  #0: ffff8880222dd548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  688.334178][   T31]  #1: ffffc90004e87bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  688.346744][   T31]  #2: ffff888144fbb198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  688.362605][   T31]  #3: ffff888027903198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  688.377193][   T31]  #4: ffff888028294160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  688.394302][   T31] 1 lock held by syz.3.1866/12202:
[  688.399833][   T31]  #0: ffff88807cdcc260 (&mm->mmap_lock){++++}-{4:4}, at: userfaultfd_release_all+0x15a/0x5e0
[  688.415330][   T31] 1 lock held by syz.3.1866/12203:
[  688.421464][   T31] 1 lock held by syz.5.2447/14077:
[  688.427091][   T31] 
[  688.440522][   T31] =============================================
[  688.440522][   T31] 
[  688.449900][   T31] NMI backtrace for cpu 0
[  688.449918][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  688.449938][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  688.449949][   T31] Call Trace:
[  688.449957][   T31]  <TASK>
[  688.449964][   T31]  dump_stack_lvl+0x189/0x250
[  688.450003][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  688.450024][   T31]  ? __pfx__printk+0x10/0x10
[  688.450057][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  688.450079][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  688.450098][   T31]  ? __pfx__printk+0x10/0x10
[  688.450122][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  688.450143][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  688.450164][   T31]  watchdog+0xf93/0xfe0
[  688.450187][   T31]  ? watchdog+0x1de/0xfe0
[  688.450209][   T31]  kthread+0x70e/0x8a0
[  688.450233][   T31]  ? __pfx_watchdog+0x10/0x10
[  688.450249][   T31]  ? __pfx_kthread+0x10/0x10
[  688.450271][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  688.450292][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  688.450310][   T31]  ? __pfx_kthread+0x10/0x10
[  688.450332][   T31]  ret_from_fork+0x3f9/0x770
[  688.450355][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  688.450377][   T31]  ? __switch_to_asm+0x39/0x70
[  688.450392][   T31]  ? __switch_to_asm+0x33/0x70
[  688.450404][   T31]  ? __pfx_kthread+0x10/0x10
[  688.450425][   T31]  ret_from_fork_asm+0x1a/0x30
[  688.450453][   T31]  </TASK>
[  688.450460][   T31] Sending NMI from CPU 0 to CPUs 1:
[  688.603956][    C1] NMI backtrace for cpu 1
[  688.603974][    C1] CPU: 1 UID: 0 PID: 12203 Comm: syz.3.1866 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  688.603993][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  688.604002][    C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x37/0x90
[  688.604023][    C1] Code: 08 50 e7 92 65 8b 15 a8 4c 27 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 74 4e 8b 91 18 16 00 00 <83> fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c 16 00 00 49 c1 e1
[  688.604043][    C1] RSP: 0018:ffffc9000431f278 EFLAGS: 00000246
[  688.604057][    C1] RAX: ffffffff8b782588 RBX: 0000000000000000 RCX: ffff88807d529e00
[  688.604068][    C1] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000000
[  688.604078][    C1] RBP: ffffc9000431f450 R08: 0000000000000003 R09: 0000000000000004
[  688.604087][    C1] R10: dffffc0000000000 R11: fffffbfff34924ec R12: ffff8880323cde0c
[  688.604099][    C1] R13: ffff888057b4d850 R14: 0000000000000004 R15: 0000000000000001
[  688.604109][    C1] FS:  00007f1f56def6c0(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000
[  688.604122][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  688.604132][    C1] CR2: 00007f5d1e36dfb3 CR3: 000000007d3c2000 CR4: 00000000003526f0
[  688.604145][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  688.604154][    C1] DR3: 0000000000200c8a DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  688.604164][    C1] Call Trace:
[  688.604171][    C1]  <TASK>
[  688.604177][    C1]  mt_validate+0x798/0x4380
[  688.604204][    C1]  ? __pfx_mt_validate+0x10/0x10
[  688.604235][    C1]  validate_mm+0xb6/0x4b0
[  688.604255][    C1]  ? __pfx_validate_mm+0x10/0x10
[  688.604280][    C1]  vma_link+0x366/0x450
[  688.604299][    C1]  ? __pfx_vma_link+0x10/0x10
[  688.604319][    C1]  ? anon_vma_clone+0x494/0x4f0
[  688.604340][    C1]  copy_vma+0x70c/0x940
[  688.604361][    C1]  ? __pfx_copy_vma+0x10/0x10
[  688.604381][    C1]  ? __pfx_move_page_tables+0x10/0x10
[  688.604399][    C1]  ? irqentry_exit+0x74/0x90
[  688.604428][    C1]  move_vma+0x81f/0x1840
[  688.604444][    C1]  ? __lock_acquire+0xab9/0xd20
[  688.604468][    C1]  ? arch_get_unmapped_area_topdown+0x251/0xbc0
[  688.604486][    C1]  ? __pfx_move_vma+0x10/0x10
[  688.604506][    C1]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  688.604528][    C1]  ? cap_mmap_addr+0xb0/0x100
[  688.604545][    C1]  ? bpf_lsm_mmap_addr+0x9/0x20
[  688.604559][    C1]  ? security_mmap_addr+0x71/0x270
[  688.604579][    C1]  mremap_to+0x6d6/0x7a0
[  688.604600][    C1]  ? __pfx_mremap_to+0x10/0x10
[  688.604620][    C1]  ? check_prep_vma+0x740/0xae0
[  688.604642][    C1]  __se_sys_mremap+0xa0b/0xef0
[  688.604670][    C1]  ? __pfx___se_sys_mremap+0x10/0x10
[  688.604698][    C1]  ? do_syscall_64+0xbe/0x3b0
[  688.604716][    C1]  ? __x64_sys_mremap+0x20/0xc0
[  688.604734][    C1]  do_syscall_64+0xfa/0x3b0
[  688.604751][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  688.604768][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.604782][    C1]  ? clear_bhb_loop+0x60/0xb0
[  688.604799][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.604812][    C1] RIP: 0033:0x7f1f55f8e9a9
[  688.604836][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  688.604848][    C1] RSP: 002b:00007f1f56def038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  688.604862][    C1] RAX: ffffffffffffffda RBX: 00007f1f561b5fa0 RCX: 00007f1f55f8e9a9
[  688.604873][    C1] RDX: 0000000000001000 RSI: 0000000000001000 RDI: 0000200000d59000
[  688.604883][    C1] RBP: 00007f1f56010d69 R08: 0000200000a91000 R09: 0000000000000000
[  688.604894][    C1] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  688.604903][    C1] R13: 0000000000000000 R14: 00007f1f561b5fa0 R15: 00007ffceeca7f88
[  688.604920][    C1]  </TASK>
[  688.611643][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  688.611662][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  688.611682][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  688.611694][   T31] Call Trace:
[  688.611703][   T31]  <TASK>
[  688.611711][   T31]  dump_stack_lvl+0x99/0x250
[  688.611738][   T31]  ? __asan_memcpy+0x40/0x70
[  688.611762][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  688.611783][   T31]  ? __pfx__printk+0x10/0x10
[  688.611826][   T31]  vpanic+0x281/0x750
[  688.611847][   T31]  ? __pfx_vpanic+0x10/0x10
[  688.611864][   T31]  ? preempt_schedule+0xae/0xc0
[  688.611889][   T31]  ? preempt_schedule_common+0x83/0xd0
[  688.611915][   T31]  panic+0xb9/0xc0
[  688.611932][   T31]  ? __pfx_panic+0x10/0x10
[  688.611952][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  688.611975][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  688.611998][   T31]  watchdog+0xfd2/0xfe0
[  688.612020][   T31]  ? watchdog+0x1de/0xfe0
[  688.612042][   T31]  kthread+0x70e/0x8a0
[  688.612067][   T31]  ? __pfx_watchdog+0x10/0x10
[  688.612083][   T31]  ? __pfx_kthread+0x10/0x10
[  688.612106][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  688.612126][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  688.612146][   T31]  ? __pfx_kthread+0x10/0x10
[  688.612168][   T31]  ret_from_fork+0x3f9/0x770
[  688.612190][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  688.612215][   T31]  ? __switch_to_asm+0x39/0x70
[  688.612229][   T31]  ? __switch_to_asm+0x33/0x70
[  688.612243][   T31]  ? __pfx_kthread+0x10/0x10
[  688.612266][   T31]  ret_from_fork_asm+0x1a/0x30
[  688.612294][   T31]  </TASK>
[  689.152576][   T31] Kernel Offset: disabled
[  689.156888][   T31] Rebooting in 86400 seconds..